UK Regulator Calls for Tougher Rules on Personal Data Use