The future EU PNR system: will passenger data be protected?