Historically, the data protection law (LPD) was more intended to protect the individual vs the State, than the individual vs private companies.

This was due to the Secret files Scandal in 1989 (https://en.wikipedia.org/wiki/Secret_files_scandal ).

Regulators are now working on aligning the aging laws with the European GDPR to better protect individuals against private companies.