Identity, privacy and the law