Ensuring compliance with data protection legislation – avoiding unnecessary issues through the misuse of personal information