Op-ed: Data protection should extend to virtual places and data objects