Increased awareness of the exposure arising from data protection risk