Data-selling falls under close scrutiny