Foundations of Data Protection and Risk Management