Does the ICO really fine people for poor data management

You bet they do and they take their role very seriously.

Check out this article from the ICO website about DATA SHARING.

If data you have collated is seen to be misused then you could feel the weight of the ICO, who can fine companies upto £500K

Our advice however large or small your company is, is to make sure you have a Data management policy, if you are unsure how to do this contact the experts at Secure Data Recycling and make sure you do not end up on the wrong side of the law.