We all know what should happen and with some firms we know what script they should stick to however, this isn't a perfect world. I hope no-one is naieve enough to think that all these firms follow the guidelines. They are in mainly unregulated industries and they go on what their employers guidelines are. Unfortunately in many cases the new guidelines are not observed and the old ones are still used. That is why we should all make more use of the Data Protection Registrar, he's there to see fair play. If more of us used him then, that would force greater acceptance and more importantly use of these new rules.