Personal data protection board