Picture the scene; investigators of the European Commission burst into your offices, collect laptops and mobile phones of a number of employees and start to make copies of the data on these devices. They also ask you for copies of these employees’ email accounts for the last five years. As they are combing through the data, it dawns on you, the data they’re reviewing and copying includes personal data.