In August, cosmetics retailer Lush avoided incurring a fine by the Information Commissioner's Office (ICO) in relation to a security breach on its website between October 2010 and January 2011. The ICO found Lush to be in breach of the Data Protection Act and that its measures to keep customers'…
