The laws that should govern the handling of misappropriated information are still frozen in the clauses of the Data Protection Act that have not been brought into local legislation.
One hallmark of the company’s responses to the incident has been how efficiently it has worked to make itself the villain in the matter.
