The Effectiveness of Outsourcing Data Protection