Specific to the UK, there's a list of enforcement actions that the Information Commissioners Office (ICO) have taken:

https://ico.org.uk/action-weve-taken/enforcement/

Some went to prison, some were fined £14M and it's a mixture of small fry and big fry.