Protecting personal information : a guide for business