“The Government has rejected calls for a law that would require significant data security breaches to be notified to the country’s privacy regulator. It said that notification to the Information Commissioner should be a matter of good practice, not law.”
OUT-LAW.com, 25th November 2008
Source: www.out-law.com