Charities including Cancer Research UK and the NSPCC are penalised for misusing data about donors.