PRIVATE COMPANIES AND PERSONAL DATA PROTECTION