The Protection of Personal Information (PPI) bill aims to protect information about both people and companies. Once it becomes law, company directors will be accountable for leaks of personal or company information – information about client and supplier companies, for example – irrespective of whether the leak comes from company insiders or contractors.

Directors will be accountable for leaks whether in the course of day-to-day business or during long IT projects and upgrades, which often involve dozens or hundreds of consultants.