The problem there is that protected attributes can often be inferred from unprotected ones. The dutch tax authority got into hot water due to discriminating based on name. Names are not protected, but when you start marking people with foreign sounding names as likely frauds something has gone awry.