Banking sector compliance with personal data law