declaration of data protection