Cyber threat protections vs. personal data privacy