Legal and UX&HMI Approach for Data Protection