“Leaders of organisations which lose personal data should think carefully before telling customers, employees or regulators of the incident, the Information Commissioner’s Office (ICO) has said. New advice says that notification should have a clear purpose.”
OUT-LAW.com, 2nd April 2008
Source: www.out-law.com