As the issue of the first Monetary Penalty Notice ("MPN") under the Data Protection Act 1998 (the "DPA") draws closer, organisations are asking themselves how they can avoid being on the receiving end of this new sanction.