Protection of personal data, Astonishment