Data protection laws are at best grossly insufficient, at worst a lie