According to its annual report, in 2014/15, the Information Commissioner’s Office (ICO) imposed civil monetary penalties amounting to over £1 million, including fines for data loss (£692,500) and unsolicited marketing communications (five penalties totalling £386,000).
The ICO also prosecuted in 13 cases involving unlawfully obtaining or disclosing personal data, resulting in ten criminal convictions.
Please note that the above does not constitute legal advice.