Data protection and cyber security: Foreign firm