I like to think most of the IT systems I work on as being best suited to extending human capabilities in an “exoskelaton” manner. In doing so we gather data about interactions that are of varying importance that occur person-to-person, person-to-system (and even perhaps system-to-system). Sig likes to talk about passing an object through a workflow and storing the changes in state as it goes. I wonder however in these days of information laws such as the Data Protection Act and the Freedom of Information Act, how much and to what level of detail, we are allowed to capture, store and use before we are touching the edges of legality.