Data Privacy and Consumer Vulnerability∗