A Relational Turn for Data Protection?