How can Companies Use AI Without Breaking Data Protection Rules ?