I think we can attach a tag to this "what another one?". Seems not a week goes by without this happening, it's about time the government took this really seriously and started to hand out real hefty fines and not just a few pounds.
How often do they need it rammed down their throats, haven't they ever heard of cryptography. All data on servers, especially of this nature, should be encrypted full stop.
I think it should be made a regulation under the data protection act.