Data security and privacy in the age of data-driven decisions