Testing the transparency gap in AI and data protection