Businesses are being warned that people who trade in, or deliberately misuse, other people's personal data will face a jail sentence for the first time. The hefty fines allowed under the Data Protection Act 1998 have not been sufficient to stop the trade in personal details, so the Act is being amended to allow courts to jail offenders for six months, with a two-year sentence available for the most serious cases.