The ICO has only recently acquired powers to audit and fine organisations, and the two may not be entirely independent of each other.