The modern state has unprecedented access to rich data about its citizens through electronic databases. But how should this be used? And what legal protection should the people have over their data?