> That doesn't mean it isn't bad when an organisation spews out, or allows to be sucked out, huge numbers of people's data.

I completely agree.