In the last five years, the Information Commissioner has considered my Department in breach of the Data Protection Act 1998 on two occasions, in 2003 and in 2005. In each case, remedial action was taken and the commissioner did not take matters further.