data protection case