“The Information Commissioner has been given the ability to fine organisations if their operational procedures cause a gross breach of data protection principles. The move, which had not been expected by privacy experts, follows a Government defeat in the House of Lords.”
OUT-LAW.com, 12th May 2008
Source: www.out-law.com