Their point, essentially, is that you can't just trust big organisations of any kind to deal squarely with you - and as an individual in the UK you do have certain rights under the Data Protection Act. Essentially, anyone holding data on you ought to make sure that the info is:
Fairly and lawfully processed
Processed for limited purposes
Adequate, relevant and not excessive
Accurate and up to date
Not kept for longer than is necessary
Processed in line with your rights
Secure
And of course,
Not transferred to other countries without adequate protection
http://www.ico.gov.u...protection.aspx
http://uk.news.yahoo...-d1d76f9_1.html