The ICO has issued a Good Practice Note to assist organisations in deciding whether to disclose information about their employees and customers when it requested by private investigators. It covers the exemptions from the data protection principles in the Data Protection Act that might apply to allow compliance with such a request, for example where the information is necessary for actual or prospective legal proceedings or for obtaining legal advice and what factors should be considered by the organisation to determine whether an exemption applies. In addition, it covers situations when personal information could be disclosed even where no such exemption applies.