Sensitive Data: Organisational Aspects of confidentiality protection and Privacy Concerns