Originally Posted by
The Saint
It's nothing to do with the DPA - although issues for BA may arise in relation to that - it's to do with breach of confidence. As, if you recall, Highlife was telling us of the virtues of respecting confidentiality.
Also, when venturing views on the law (particularly when expressed with an apparent air of authority) it is usually better to rely on actual knowledge rather than your deductions from "logic".
I'll leave you with a quote from Lord Goff in Spycatcher:
Interesting quote. I was (sort of am still) convinced that this was a clearcut case where the obligation to protect personal data (like in this case) falls with the owner of the system, not the (even if he is not so innocent) bystander.
I wonder if it is different if disclosure is by accident (like in the case of the ventilator) or by carelessness. Always an opportunity to learn...
