Question to the Department for Digital, Culture, Media & Sport:

To ask the Secretary of State for Culture, Media and Sport, who is responsible for taking action against data users who misuse personal data; and what sanctions are available to that body.

The Information Commissioner is the UK's independent authority responsible for administering and enforcing information rights, and provides guidance and advice to individuals and organisations on, among other things, the Data Protection Act 1998.

The Information Commissioner has a number of tools at its disposal to take action against those that breach the legislation. These powers include the ability to conduct audits, serve enforcement notices and impose civil monetary penalties of up to £500,000.

Further information about the Information Commissioner can be found on the Information Commissioner’s Office’s website at: www.ico.org.uk