investors data protection