The Role of Law in Regulating Personal Data Protection in the Digital Era