Mr. William Malcolm:

We have a range of policies and internal processes in place to ensure that we are taking appropriate organisational and technological safeguards. We have a specific policy around access where there has to be a clear business case for access to data generally. We also have a separate policy covering access to voice and audio recording data, so there are safeguards to ensure that we have got proper oversight over the use of the data and we have a rigorous vendor-contracting process in place to ensure that we have appropriate oversight over vendors and contractual protection in place. Clearly in this instance an individual made an unauthorised disclosure and we took immediate steps to shut down that individual's access.