Mr. Dale Sunderland:

I doubt whether any commercial entity or private, public or voluntary sector company is always in full compliance with data protection law. I know there is context, risk and large-scale data processing. We are looking through all these issues and are achieving change as we engage with the companies. If based on everything we have gathered, we make an assessment that there is a need to look at this on a statutory footing through an inquiry under the Data Protection Act, the commission will make that decision. We are doing this in co-operation with our European data protection colleagues. The European Data Protection Board is looking at whether there is a need for further guidance in this field. It is the view of all of the colleagues with which we engage at a European level that there are issues that need to ironed out but there might be a need for further guidance from the European data protection community on this issue.