Enacting Data Protection Laws