Gross negligence AND the actual loss/spillage of the information would, together, be sufficient under section f. Is there evidence of the latter?