Re: “If you haven't phoned me and told me about it, I will phone you"
While I strongly support the ICO (and, indeed, the public) being informed of all data breaches it does seem reasonable that this organisation would say "you have a duty to report that to the ICO, but we are not going to get involved in that". There is a role for an expert group who can advise companies without insisting they make the report.
Of course, these sorts of chinese walls, for the public good, are exactly what the government seem determined to break down in our personal lives. I see no reason why companies should be able to get the benefit of good advice while possibly breaking the law and yet individuals do not have the option to keep data required by one government department separate from data supplied to another.
For example, it is in the public interest that people get prompt treatment for possibly communicable illnesses so we need to make sure that doesn't mean they will be grassed up to other government depts.
Biting the hand that feeds IT
