In section 241 of the Companies Act 2006 (protected information: restriction on use or disclosure by company), after subsection (2) insert -
"(3) If a company uses or discloses information in contravention of subsection (1), an offence is committed by -
(a) the company, and
(b) every officer of the company who is in default.
(4) A person guilty of an offence under this section is liable on summary conviction -
(a) in England and Wales, to a fine;
(b) in Scotland or Northern Ireland, to a fine not exceeding level on the standard scale and, for continued contravention, a daily default fine not exceeding one-tenth of level 5 on the standard scale."