Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
352 fines found
Total: $164.7M
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2018-04-03 | Royal Mail Group Limited | £12K | PECR | UK ICO | United Kingdom | marketing | On two dates in July 2017, the company sent emails to 327,014 people who had alr...On two dates in July 2017, the company sent emails to 327,014 people who had already opted out of receiving direct marketing. |
| 2017-04-03 | NSPCC | £12K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Wealth screening / data matching / data sharing |
| 2017-04-03 | Royal British Legion | £12K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Wealth screening / data matching / data sharing |
| 2017-04-03 | Great Ormond Street Hospital Children’s Charity | £11K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Wealth screening / data matching / data sharing |
| 2017-06-12 | WM Morrison Supermarkets PLC | £11K | PECR | UK ICO | United Kingdom | marketing | The company instigated the transmission of unsolicited electronic mail for the p...The company instigated the transmission of unsolicited electronic mail for the purpose of direct marketing without the sufficient consent of recipients. |
| 2017-04-03 | WWF | £9K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Wealth screening / data matching / data sharing |
| 2017-04-03 | Battersea Dogs and Cats Home | £9K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Wealth screening / data matching / data sharing |
| 2021-06-14 | Papa John’s (GB) Limited | £10K | PECR | UK ICO | United Kingdom | marketing | Papa John’s (GB) Limited has been fined £10,000 for sending 168,022 nuisance mar...Papa John’s (GB) Limited has been fined £10,000 for sending 168,022 nuisance marketing messages to its customers. |
| 2021-06-01 | The Conservative Party | £10K | PECR | UK ICO | United Kingdom | marketing | The Information Commissioner’s Office (ICO) has fined the Conservative Party £10...The Information Commissioner’s Office (ICO) has fined the Conservative Party £10,000 for sending 51 marketing emails to people who did not want to receive them. It follows an ICO investigation relating to emails sent from the Conservative Party in the name of Rt Hon Boris Johnson MP during the eight days in July 2019 after he was elected Prime Minister. The emails were addressed to the people they were sent to by name and promoted the party’s political priorities, with the last sentence including a link directing them to a website for joining the Conservative Party. |
| 2021-06-14 | Global One 2015 | £10K | PECR | UK ICO | United Kingdom | marketing | Between 24 April 2020 and 23 May 2020 Global One instigated a total of 573,000 u...Between 24 April 2020 and 23 May 2020 Global One instigated a total of 573,000 unsolicited direct marketing messages, resulting in total of 548 complaints. They have been fined £10,000. |
| 2021-01-28 | Seafish Importers Limited | £10K | PECR | UK ICO | United Kingdom | marketing | Between 23 August 2019 and 7 April 2020, a confirmed total of 491,995 direct mar...Between 23 August 2019 and 7 April 2020, a confirmed total of 491,995 direct marketing messages were sent by Seafish Importers Limited and received by subscribers. Of those messages, 276,866 were sent between 20 March 2020 and 7 April 2020, during the height of the Covid-19 pandemic, relating to the sale of face masks. These messages contained direct marketing material for which subscribers had not provided valid consent. |
| 2021-10-18 | HIV Scotland Ltd | £10K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Contraventions of Articles 5(1)(f), 32(1) and 32(2) of the UK GDPR |
| 2014-10-31 | Worldview Limited | £8K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | -- |
| 2021-05-10 | Tested.Me Limited | £8K | PECR | UK ICO | United Kingdom | marketing | Tested.me Ltd (TML) of St Albans, provides digital contact tracing services whic...Tested.me Ltd (TML) of St Albans, provides digital contact tracing services which work by offering people a QR code to scan when arriving at businesses’ premises. The company sent nearly 84,000 nuisance emails at the height of the Covid-19 pandemic between September and November last year, when businesses were using private QR code providers to collect personal data to meet the government’s contact tracing rules. |
| 2024-03-06 | The Central Young Men's Christian Association | £8K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | The Central YMCA sent an email to individuals participating in a programme for p...The Central YMCA sent an email to individuals participating in a programme for people living with HIV using “CC” rather than “BCC”, revealing the email addresses to all recipients. 166 individuals could be identified or potentially identified from their email address. As a result, it could be inferred that these individuals were likely to be living with HIV. The Central YMCA have been fined £7,500 and issued a reprimand. |
| 2017-04-03 | Oxfam | £6K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Wealth screening / data matching / data sharing |
| 2016-03-07 | David Lammy MP | £5K | PECR | UK ICO | United Kingdom | marketing | Automated calls being made urging people to back a mayoral candidate |
| 2013-09-26 | Jala Transport | £5K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Theft of unencrypted portable hard drive containing its customer database |
| 2022-01-18 | Energy Suite Ltd | £2K | PECR | UK ICO | United Kingdom | marketing | Energy Suite have been fined for making over 1,000 unsolicited direct marketing ...Energy Suite have been fined for making over 1,000 unsolicited direct marketing calls to subscribers who were registered with the TPS and who had not notified Energy Suite that they were willing to receive such calls, and to three complaints being made as a result. |
| 2011-05-09 | Andrew Jonathan Crossley (ACS Law) | £1K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Personal data exposed following inadequate web-hosting security |
| 2017-03-10 | Barrister | £1K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Documents containing confidential and sensitive information was accessible via t...Documents containing confidential and sensitive information was accessible via the internet |
| 2015-10-01 | Hutchison 3G UK Ltd | £1K | PECR | UK ICO | United Kingdom | marketing | Failed to comply with the personal data breach reporting requirements under PECR |
| 2018-01-18 | SSE Energy Supply Ltd | £1K | PECR | UK ICO | United Kingdom | marketing | SSE Energy Supply Ltd fined £1,000 after they sent an email to an individual in ...SSE Energy Supply Ltd fined £1,000 after they sent an email to an individual in error. |
| 2016-04-20 | EE Limited | £1K | PECR | UK ICO | United Kingdom | marketing | Failed to comply with the personal data breach reporting requirements under the ...Failed to comply with the personal data breach reporting requirements under the Privacy and Electronic Communications (EC Directive) Regulations 2003. |
| 2015-12-11 | Bloomsbury Patient Network | £250 | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Inadvertently revealed the identities of HIV patients through an email error. |