They are holding the data based on your express consent for them to hold the data (hence the requirement for you to press "YES").
Even if the HP were to be holding your data illegally, it is rare for you to be able to extract civil penalties. Normally this is because they are holding data against you that is held illegally (e.g. was hacked), is inaccurate or being used for defamatory purposes (e.g. your photo is being used to advertise adult services).
In all cases, you will need to contact the Information Commissioner's Office who is able to determine if the act has been breached and can bring action on your behalf if you feel you have been wronged (http://www.ico.gov.uk/Global/faqs.aspx#fF900A848-3AB1-41EA-8ED5-5C3BBBD66D3B)">http://www.ico.gov.uk/Global/faqs.aspx#fF900A848-3AB1-41EA-8ED5-5C3BBBD66D3B).
As always, this is not legal advice. For details relating to your particular situation, consult an attorney.
They don't have MY permission to hold MY data if YOU submit it, which is what's happening here:
Windows Live wrote:
The Huffington Post will have access to your and your contacts' email addresses.