Using retention labels to protect personal data