Cassandra

Scotland Edinburgh

Business & Systems Analyst

Why invite us to feel sorry for poor execs wondering if they can get away with not reporting security lapses that involve personal ID and access to the other person's money and information? Not all thefts are reported - with little chance of recovery and no incenitive to pursue a loss and where the publicity can damage a firm's reputation.

I can accept a choice exists only where it is not deceitful to bear small losses and providing the Co. agrees to bear all consequential losses. If no-one will report such attacks or thefts honestly it will be the customers who will bear the losses.

It is fraudulent to claim customer data is safe when your security profile is distorted by under reporting. When will Co.s ever come clean? Scams will go undetected - unless they are reported. I suggest a common report is shared by police and Info-Commissionaire.