No companies have been fined in the first year of tough new data laws, despite a sharp rise in breaches.