Difficulties abound as to where the boundary between legitimate and illegitimate processing of personal data must be set. The open-ended wording of the EU Data Protection Directive (DPD) 95/46 leaves space for diverse interpretations. Taking stock of the criticisms of the European Court of...