The ICO's controversial policy of not fining public sector organisations in the UK, except for the most serious cases, fails to deter them from breaching data protection law.
The ICO must use its full powers, including enforcement notices and fines, to make data protection law effective.