A lawyer writes:
Taking action against con artists is difficult but a new data protection law can help