Data protection and identity management – are you sure you’re safe?