Protection of personal data: technical and political complexity