The Data Protection Act 1998 protects people's personal information. O2 mobile customers in the UK were inadvertently sharing their phone numbers with websites they visited. This privacy breach could allow site owners to collect numbers for marketing calls and texts without consent. The Information Commissioner's Office is considering investigating further, but a phone number alone is not currently classified as personal identifying information under the Act.