Whether a business has met the “transparency requirement” imposed by UK data protection law is a question of fact and degree in every case, and not a matter of rigid principle, an information rights tribunal has confirmed.