But information rights body ICO says under UK law Sony terms are not applicable; is threatening penalty of £500,000.
Under the UK’s Data Protection Act, any individual or company which handles personal information (including names, email addresses and payment details) is required to keep that information secure, but Sony’s PSN terms and conditions suggest otherwise: