my sister was sacked recentley as supervisor didn/t like her. the same supervisor has now given my sister name, address and phone number to someone had placed an order with. what happens if the date protection action is broken?