Search Privacy Fines

Browse and filter privacy enforcement fines worldwide.

← Back to Overview

352 fines found

Total: $164.7M

DateCompanyFineRegulationAuthorityCountryTypeSummary
2018-04-03Royal Mail Group Limited£12KPECRUK ICOUnited Kingdommarketing
On two dates in July 2017, the company sent emails to 327,014 people who had alr...

On two dates in July 2017, the company sent emails to 327,014 people who had already opted out of receiving direct marketing.

2017-04-03NSPCC£12KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Wealth screening / data matching / data sharing
2017-04-03Royal British Legion£12KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Wealth screening / data matching / data sharing
2017-04-03Great Ormond Street Hospital Children’s Charity£11KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Wealth screening / data matching / data sharing
2017-06-12WM Morrison Supermarkets PLC£11KPECRUK ICOUnited Kingdommarketing
The company instigated the transmission of unsolicited electronic mail for the p...

The company instigated the transmission of unsolicited electronic mail for the purpose of direct marketing without the sufficient consent of recipients.

2017-04-03WWF£9KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Wealth screening / data matching / data sharing
2017-04-03Battersea Dogs and Cats Home£9KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Wealth screening / data matching / data sharing
2021-06-14Papa John’s (GB) Limited£10KPECRUK ICOUnited Kingdommarketing
Papa John’s (GB) Limited has been fined £10,000 for sending 168,022 nuisance mar...

Papa John’s (GB) Limited has been fined £10,000 for sending 168,022 nuisance marketing messages to its customers.

2021-06-01The Conservative Party£10KPECRUK ICOUnited Kingdommarketing
The Information Commissioner’s Office (ICO) has fined the Conservative Party £10...

The Information Commissioner’s Office (ICO) has fined the Conservative Party £10,000 for sending 51 marketing emails to people who did not want to receive them. It follows an ICO investigation relating to emails sent from the Conservative Party in the name of Rt Hon Boris Johnson MP during the eight days in July 2019 after he was elected Prime Minister. The emails were addressed to the people they were sent to by name and promoted the party’s political priorities, with the last sentence including a link directing them to a website for joining the Conservative Party.

2021-06-14Global One 2015£10KPECRUK ICOUnited Kingdommarketing
Between 24 April 2020 and 23 May 2020 Global One instigated a total of 573,000 u...

Between 24 April 2020 and 23 May 2020 Global One instigated a total of 573,000 unsolicited direct marketing messages, resulting in total of 548 complaints. They have been fined £10,000.

2021-01-28Seafish Importers Limited£10KPECRUK ICOUnited Kingdommarketing
Between 23 August 2019 and 7 April 2020, a confirmed total of 491,995 direct mar...

Between 23 August 2019 and 7 April 2020, a confirmed total of 491,995 direct marketing messages were sent by Seafish Importers Limited and received by subscribers. Of those messages, 276,866 were sent between 20 March 2020 and 7 April 2020, during the height of the Covid-19 pandemic, relating to the sale of face masks. These messages contained direct marketing material for which subscribers had not provided valid consent.

2021-10-18HIV Scotland Ltd£10KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Contraventions of Articles 5(1)(f), 32(1) and 32(2) of the UK GDPR
2014-10-31Worldview Limited£8KUK GDPR / DPA 2018UK ICOUnited Kingdomother
--
2021-05-10Tested.Me Limited£8KPECRUK ICOUnited Kingdommarketing
Tested.me Ltd (TML) of St Albans, provides digital contact tracing services whic...

Tested.me Ltd (TML) of St Albans, provides digital contact tracing services which work by offering people a QR code to scan when arriving at businesses’ premises. The company sent nearly 84,000 nuisance emails at the height of the Covid-19 pandemic between September and November last year, when businesses were using private QR code providers to collect personal data to meet the government’s contact tracing rules.

2024-03-06The Central Young Men's Christian Association£8KUK GDPR / DPA 2018UK ICOUnited Kingdomother
The Central YMCA sent an email to individuals participating in a programme for p...

The Central YMCA sent an email to individuals participating in a programme for people living with HIV using “CC” rather than “BCC”, revealing the email addresses to all recipients. 166 individuals could be identified or potentially identified from their email address. As a result, it could be inferred that these individuals were likely to be living with HIV. The Central YMCA have been fined £7,500 and issued a reprimand.

2017-04-03Oxfam£6KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Wealth screening / data matching / data sharing
2016-03-07David Lammy MP£5KPECRUK ICOUnited Kingdommarketing
Automated calls being made urging people to back a mayoral candidate
2013-09-26Jala Transport£5KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Theft of unencrypted portable hard drive containing its customer database
2022-01-18Energy Suite Ltd£2KPECRUK ICOUnited Kingdommarketing
Energy Suite have been fined for making over 1,000 unsolicited direct marketing ...

Energy Suite have been fined for making over 1,000 unsolicited direct marketing calls to subscribers who were registered with the TPS and who had not notified Energy Suite that they were willing to receive such calls, and to three complaints being made as a result.

2011-05-09Andrew Jonathan Crossley (ACS Law)£1KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Personal data exposed following inadequate web-hosting security
2017-03-10Barrister£1KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Documents containing confidential and sensitive information was accessible via t...

Documents containing confidential and sensitive information was accessible via the internet

2015-10-01Hutchison 3G UK Ltd£1KPECRUK ICOUnited Kingdommarketing
Failed to comply with the personal data breach reporting requirements under PECR
2018-01-18SSE Energy Supply Ltd£1KPECRUK ICOUnited Kingdommarketing
SSE Energy Supply Ltd fined £1,000 after they sent an email to an individual in ...

SSE Energy Supply Ltd fined £1,000 after they sent an email to an individual in error.

2016-04-20EE Limited£1KPECRUK ICOUnited Kingdommarketing
Failed to comply with the personal data breach reporting requirements under the ...

Failed to comply with the personal data breach reporting requirements under the Privacy and Electronic Communications (EC Directive) Regulations 2003.

2015-12-11Bloomsbury Patient Network£250UK GDPR / DPA 2018UK ICOUnited Kingdomother
Inadvertently revealed the identities of HIV patients through an email error.
PreviousPage 14 of 15Next