Fairly recently a number of people, some Bit members, had their credit card details stolen (and misused) after using a certain UK online supplier. The supplier took several days to notify customers of the security breach, and may not have bothered without a lot of pressure and bad publicity on several forums. The Lords' recommendation seems right on this. And why not report credit card fraud to the police? Is it any different to having your pocket picked? Anyone can start an e-shop these days, I want to know they're taking good care of my CC number and I want to know sharpish if they foul up. I think HM Government have been overhasty in dismissing this.