Can we have data protection law before these new fintech companies steal our data like existing ones?