Defending Data Protection Claims