That's the part I can't figure out, because wouldn't we also be concerned with departments if we're concerned...? This is the privacy angle specifically, not the access to information angle. Why am I concerned about the Information Commissioner ordering disclosure of personal information, but not the department disclosing information? If there's personal information either way, I'd be equally concerned.
