...civil offence. In a victory for data-loss law campaigners, MPs backed the amendment to the Criminal Justice and ImmigrationAct to make it an offence for anyone to "intentionally or recklessly disclose information" or "repeatedly and negligently...
http://news.zdnet.co.uk/itmanagement/0,1000000308,39416126,00.htm
...power to impose a civil monetary penalty on data controllers was created by section 144 of the Criminal Justice and ImmigrationAct 2008, which amends the Data Protection Act of 1988. The power is expected to be in force next April, according...
http://www.out-law.com//default.aspx?page=10517