Legal aspects of data protection in cloud federations