That's the part I can't figure out, because wouldn't we also be concerned with departments if we're concerned...? This is the privacy angle specifically, not the access to information angle. Why am I concerned about the Information Commissioner ordering disclosure of personal information, but not the department disclosing information? If there's personal information either way, I'd be equally concerned.
On October 25th, 2017. See this statement in context.