“There’s no disguising that this is a business that should have known better,” says ICO director.

How many headlines do there have to be before companies take data security more seriously?