Personal Data and Consumer Protection: What do They Have in Common?