Here we go again
How does one employee have access to masses of data in that level of detail? It was the same with the various DHSS and NHS blunders: the focus was on losing the CD or whatever with the info, rather than the person having all that info in the first place.