Data protection stupidity