The Office for Personal Data Protection imposes subsequent penalties for failure to report a violation