Data protection Data protection damages and tax evader CD Does the authority have to observe data protection with the tax evader CD? Imagine the following fictitious case: German authorities purchase a CD containing personal data of September 13, 2010