In recent weeks the Information Commissioner's Office (ICO) has warned that data controllers could face a £500,000 penalty if they breach the Data Protection Act.