SMEs and responsible data processing