The right to protection of personal data: the new posterchild of European Union citizenship?