Data protection in corporate insolvency: who is responsible?