Breaking Personal Data Protection Act just one time to get your permission?