Csa releases tool for personal data legal protection