Breaches of the Data Protection Act 1998 can be dealt with by the Information Commissioner, the courts or by Departments at an informal local level. Thus, the information requested is not held centrally and could be provided only at disproportionate cost.