In de jure systems the handling of sensitive data is regulated by national laws.
These include procedures surrounding the disclosure of personal data through lookup services within the system as well as the disclosure of personal data to third parties.