Historically, the data protection law (LPD) was more intended to protect the individual vs the State, than the individual vs private companies. This was due to

Historically, the data protection law (LPD) was more intended to protect the individual vs the State, than the individual vs private companies. This was due to the Secret files Scandal in 1989 (https://en.wikipedia.org/wiki/Secret_files_scandal https://en.wikipedia.org/wiki/Secret_files_scandal ). Regulators are now working on aligning the aging laws with the European GDPR to better protect individuals against private companies.