Information about an identifiable person needs to be protected. That is not only about name & address details, but also about information that says something indirectly about the person, such as social status. Processing this data can impinge upon privacy. That certainly applies to information about race, sexual preferences, political stance, religion and health. That is why the strict conditions on processing of privacy-sensitive information are anchored in laws, the most important of which is the Dutch Data Protection Act (WBP). Within that context, it is often difficult for a business to manoeuvre, because commercial and business interests may require, for example, potential customers to be approached by telephone or e-mail, or might call for internal surveillance on the work floor with cameras or monitoring of e-mail and surfing habits of employees.