While the companies can legally use the retained data for billing, market research, sales activities and value added services, 40 of the 229 companies that responded to a mandatory survey said they used the information „solely for purposes other than the legally permitted processing goals,“ according to the report. Still others said they used the data for both legally permitted and non-permitted purposes.