Privacy protection has always been considered as an important social issue along with the growth of information society and economy. The business models adopted by many of contemporary organisations premise that massive numbers of personal data are collected by their 24/7 electronic surveillance systems and analysed by their lCT-based information systems to control their potential customers' behaviour. This characteristic is allegedly fraught with the risk of an invasion of privacy.