Unauthorised sale of data to third parties will land developers in trouble.