Are data protection budgets increasing enough?