Legal Frameworks Shaping Data Security and Privacy in Financial Institutions