Data protection is not an excuse when tackling scams and fraud