Response to open peer commentaries on “Ethical responsibilities for companies that process personal data”