Data Protection Act 1998 – Two companies have been successfully prosecuted by the Information Commissioner’s office for failing to notify under DPA 1998. Fines can reach £5000.