A European resident seeks to use data-privacy laws to stop the transfer of financial data