Re: The steps we have to take to protect our data
As with data protection legislation they should be forced into accepting the blame since they essentially outsourced responsibility for it.
The decision was made by them, they are responsible for the outcome.