Where Iive, you have to provide those voluntarily and it is only allowed to ask for it, when you work with sensitive data or in sensitive environments.