Scenario

You currently work in the administrative office of a large private housing association; you deal with a large number of people's personal data on your system.  A number of your customers have contacted you to say that they have been receiving unexpected high numbers of junk mail deliveries and an increasing amount of cold calls over the last few weeks, they have been trying to find out how their personal information has got into the hands of these people, but the only common factor that they can identify is that they all rent houses from your organisation.