Personal data may not be so personal anymore