I have been asked to reply.
The Information Commissioner has regulatory powers to bring about compliance with the Data Protection Act 1998. In serious cases involving direct mailing, the Commissioner has the power to issue an enforcement notice requiring an organisation or individual to take specified action to comply with the Act. Failure to comply with such a notice is a criminal offence.
The Commissioner also has the ability to seek an enforcement order under the Enterprise Act 2002 in cases to require an organisation to cease conduct, which is harmful to consumers.