The Well-Intentioned Threat of Data Protection and Privacy?