Personally I believe James needs to be sacked for his incompetence and HR should have a field day on his disciplinary. Breaching data protection is a serious crime.