An aggrieved data subject could most certainly sue the data controller (not the individuals, although as trustees they might be liable) under section 13 DPA for Vidal Hall "pure distress" compensation.
Jon Baines,
Chair,
nadpo.co.uk