Does Privacy Policy Suffice As Data Protection