. . "One is not aware of any Data Protection Act or law that stipulates how personal information should be protected and penalties where there is a breach." . .