Data privacy could be the next competitive battlefield for banks