With a new data protection act on the way, time for a realit