If you are concerned an organisation is breaching the Data Protection Act 1998 in the first instance you should write to the organisation responsible for the breach.
In your letter make it clear what the details of the breach are and ask them to rectify the problem.
If they are unhelpful or fail to respond to you, inform the Information Commissioner.