The AA’s copped to credit data blurt, but what about car-crash incident response?

When we said 'Credit Card details have not been compromised', we meanthellip; The AA belatedly admitted late on Friday that customer data – including in some cases partial credit card numbers – had been exposed in a recent breach.
Security experts gave the confession a frosty response while a specialist IT lawyer said incident response handling of this type would risk severe sanctions once new data protection laws come into effect next May.…