Big data, privacy and COVID-19 – learning from humanitarian expertise in data protection