The short answer, as I said before, is that the custodians of the data should be the TSB in the event of an incident or accident. It should not go to an employer for whatever reason they want to use it, especially a vindictive employer, as we've seen over so long.
