The Home Secretary should introduce powers given to introduce jail as a punishment for people who unlawfully obtain, disclose or sell personal data (under Section 55 of the Data Protection Act) without the agreement of the data controller. She was given the powers under the Criminal Justice and Immigration Act, but as yet they have not been brought in. There have previously been calls by the Justice Committee and the Information Commissioner’s Office to introduce tougher sentences. They do not see the current sanctions – which are typically just £100 – as sufficient deterrent. In fact, the Information Commissioner has called them “chicken feed fines”. The Home Affairs Select Committee has now become the latest body to recommend the new powers are brought in.