When the Information Commissioners Office (ICO) announced its plans to introduce a fine of £500k for serious data breaches it sparked a considerable debate on the legal obligations of organisations wh