Protecting individuals against the negative impact of big data The potential and limitations of the privacy and data protection law approach