One in five small UK firms have likely breached the Data Protection Act, while half have probably done so several times, according to a new survey.National standards body the BSI found 18 per cent of the 500 small and medium businesses (SMBs) polled didn’t know one way or another if they were compliant with the act.