Has anyone had a similar problem as I am positive this contravenes the data protection act????