“Prison sentences of up to two years for illicitly obtaining confidential personal data, such as phone or medical records, are to be introduced from next April under Ministry of Justice proposals published today.”
The Guardian, 15th October 2009
Source: www.guardian.co.uk