From facial recognition technology to children online: regulating data protection in 2021