A data protection issue we can’t afford to ignore