The middle-out approach : assessing models of legal governance in data protection, artificial intelligence, and the Web of Data