Balancing data protection and the legitimate interests of information communication technology companies : comparing the approaches of the EU, US and China (mainland)