Several potentially serious incidents have been reported since the Data Protection Commission launched an investigation last year.