“A consultation on exercising the power to provide for custodial sanctions for those found guilty of knowingly or recklessly obtaining, disclosing, selling or procuring the disclosure of personal data without the consent of the data controller.”
Ministry of Justice, 15th October 2009
Source: www.justice.gov.uk