A survey conducted by the PDP (Privacy and Data Protection) in the UK showed why smaller organizations are concerned about data protection.

SMEs listed the top reasons why they complied with data protection law and 60% stated that it was because of concerns about receiving fines.  A similar number stated that it was to avoid receiving adverse publicity. 80% said that they wanted to make public that they took compliance seriously.

Source:  Mike Bradford, Regulatory Strategies