Simply put, if the Information Commisioner thinks a company is in breach of the DPA they will force the company to remove the information from your credit file. I am assuming the so called Regulatory Action Division is responsible for seeing this is done.