Hi we are one of the largest photo printing companies in the UK. Customers ring up to check on their order status, etc. We want to know, if we comply with data protection regulations when we ask customers questions to confirm their identity? We also want to know how many questions are we allowed to ask and what sort of questions are we allowed to ask? At present we ask 3 security questions on all incoming and outgoing calls. These questions can consist of the following: Order Number name postcode First line of address What the customer has ordered (Content of images) Email Address Telephone number Items in order Best regrads. Sam