Surrey County Council, a simple error Fine of £120,000 imposed by the Information Commissioner’s Office (ICO). The fine is the largest imposed on a single organisation since the ICO was granted its enhanced powers to issue fines in April 2010. The Council was fined for three serious breaches of the Data Protection Act over the last year.Council employee inadvertently emailed personal information relating to 241 adult social care service users to the incorrect group email address.