A US law which prohibits employers from asking employees for DNA samples is an example of the strictness required to protect privacy in the digital age.