The potential penalties for breaching the Data Protection Act just got tougher. Yet NHS organisations are still breaching it. Daloni Carlisle reports.