Why regulatory data protection matters for medicines