The Information Commissioner's Office is the Government organisation that enforces the Data Protection Act 1998 and subordinate legislation. The Information Commissioner can issue Enforcement Notices and prosecute Data Controllers.