Protecting personal data in banking operations