http://blog.clausehound.com/blog-bite-can-organizations-in-the-uk-legally-disclose-information-that-violates-its-own-privacy-policy/