They had a fiasco in November by sending an email org-wide which had "reply-all" enabled. So they clearly don't follow best practice.

http://www.bbc.co.uk/news/technology-37979456