The Data Controller is the person responsible in any given organisation who is accountable for compliance to the Data Protection legislation. Should be one in every organisation that keeps records on individuals from HMRC to the local cricket club.
The Information Commissioner is the bod in...
Never ceases to amaze me how so many people confuse Data Protection with Data Privacy.
As for knocking the club, meh. Some folk will still complain if the world was perfect.
But I do believe voicing things that can be changed for the better is a good thing.