The data protection noose is tightening further