You can't do that
its against data protection laws.....
I'll bite, paragraph and subsection is always my reply. That's because almost everyone doesn't actually know what the DPA is. Heck, I've worked in so many environments were I need to know and I refer back to various law sites.
It comes as no surprise that most offices fail, as most people in offices learn about data protection from a business trainer that parrot fashions something that sounds similar to it.