Data loss prevention raises legal concerns