After evaluating the success of data breach disclosure laws in the U.S., The British government has decided not to implement similar rules for private business.

PC Pro reports the UK's Information Commissioner's Office concluded that as a matter of "best practice," businesses should let consumers know if their personal information has been compromised. The ICO is releasing a set of guidelines for businesses who are evaluating the seriousness of a breach, and adds that it will consider firms' self-policing efforts when considering complaints against them.

You can read the full ICO report here.

This interesting post at Security Watchdog is empathetic with the ICO ruling, suggesting that folks already have enough on their minds without getting weekly reminders of minor data leaks. David Neal writes:

Perhaps, for once, a softly softly approach is the best idea and we should let firms assess the severity of the incidents themselves before tackling them in the appropriate manner. After all, less fuss, less panic, and the more faith we can all have in the industries, organisations and enterprises that we all use on a daily basis.

The ICO's stance may put it at odds with the European Union, which is considered broad rules on compulsory data breach disclosure.