Relevant, although mostly just to the UK. The ICO in the UK generally only goes after "worst offenders" or the biggest companies. This means anyone under a certain size can either ignore most of the laws they enforce or at least only bother to resolve the issues when ICO chase them up.