We need a court action
to decide a minimum level of protection below which an organisation is simply negligent (and thus liable) set as a precedent.
Forget pratting around with the ICO - may as well talk to the cat.
Any lawyers care to advise if this is possible ?