Personal data – an expanding concept?