Me too but has anyone actually been fined for this sort of thing yet? I tried to report one site to the UK ICO and didn't even get an automated email reply.

Seems like the law exists but there's nobody to enforce it.