Data privacy is a legal issue for the hospitality industry