“If you haven't phoned me and told me about it, I will phone you"
How does a relatively secret organisation prove who they are on the phone?
Separately, if you don't get a phone call following a breach does that mean that either:
1) you are insignificant/unimportant in the eyes of our political masters or
2) that might indicate that said breach was done on behalf of one of "our friends"
Lastly, whilst I appreciate the sentiment of non-disclosure in the interest of free discussion and the dilemma around this topic, it does suggest a certain institutionalised contempt for the ICO, and also may provide a refuge for certain "less than entirely forthright" companies who, when breached, may go to this organisation whilst publicly denying anything has happened, and later trying to use that as protection against redress claiming some spurious "national security interest"
Biting the hand that feeds IT
