What to do in case of a breach
[ch 5: page 38]If you know or suspect that you have done something that is in breach of the data protection rules, or think that someone else has, you must tell the data controller. If you delay, there is more chance that the breach will cause damage, whereas informing the data controller immediately will give the union the opportunity to minimise any damage. The ICO will look more favourably on data controllers who have acted immediately to try to minimise damage.