Inadequate Data Protection and Compliance Gaps