Not every company I've dealt with, or worked for has been net based. All have had some sort of awareness of Data Protection. Obviously, there were also exemptio

Not every company I've dealt with, or worked for has been net based. All have had some sort of awareness of Data Protection. Obviously, there were also exemptions for the smallest businesses. Sometimes awareness was simply a weekend going through DPA and deciding they were small enough to be exempt. The biggest problem with Data Protection was the maximum penalty, and that it had no teeth for data that moved out of area. It simply wasn't enough for the larger corporations to care that much - unless they were purely national. Hence some companies being fined multiple times for the same failings. I don't believe there's a Shell, Philips, Siemens or Glaxo that didn't have awareness, data protection officer and so on.