We would contact the Information Commission Office within 72 hours and tell the individual if the data leak involves information that can lead to: discrimination, financial loss, loss of confidentiality, damage to reputation and economics and social disadvantage