Would it not be easy to find out who he sold it to by asking the people that received the calls who they received them from?
I really get the impression that the ICO don't try very hard.
I suppose it is possible that they've done that, and there's an ongoing investigation that they can't talk about....but then again, I suspect William Hill would give me good odds that they are not.
Biting the hand that feeds IT
