...the government should introduce criminal penalties including prison sentences for severe breaches of personal data. FCObreached data privacy of 50 000 visa applicants (13 November 2007) HMRC in identity theft scare (9 October 2007) News...
http://www.infosecurity-magazine.com/news/071120_hmrc_lost_in_post.html