The Information Commissioner's Office (ICO) has taken action against three county councils for breaching the Data Protection Act.