...their personal data, he points out that inadequacies in the EU Directive and its local implementation allow many datacontrollers to ride roughshod over subjects' wishes when it comes to the handling of sensitive personal data. 'Identity...
http://www.computerweekly.com/blogs/the-data-trust-blog
...of 10% of the highest annual turnover of a small company." The power to impose a civil monetary penalty on datacontrollers was created by section 144 of the Criminal Justice and Immigration Act 2008, which amends the Data Protection Act...
http://www.out-law.com//default.aspx?page=10517