ICO statement on Capita incident