Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
698 fines found
Total: $7.9B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2025-12-10 | University of Limerick | €98K | GDPR | Ireland DPC | Ireland | other | This Decision arises from an own-volition inquiry into the University of Limeric...This Decision arises from an own-volition inquiry into the University of Limerick (‘UL’) following a series of personal data breaches that occurred between November 2018 and January 2020… Articles: Art. 5, Art. 30, Art. 32, Art. 33, Art. 34 |
| 2022-02-07 | Tempcover Ltd | £85K | PECR | UK ICO | United Kingdom | marketing | Between 26 May 2019 and 26 May 2020, a total of 29,970,419 unsolicited direct ma...Between 26 May 2019 and 26 May 2020, a total of 29,970,419 unsolicited direct marketing messages were received by subscribers, having been sent by Tempcover Ltd without valid consent. The ICO has fined them £85,000. |
| 2013-07-30 | Bank of Scotland | £75K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Multiple faxes containing personal data sent to incorrect recipient |
| 2012-12-12 | London Borough of Lewisham | £70K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Personal data left on a train |
| 2012-10-09 | Norwood Ravenswood | £70K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Personal data left outside of residential property |
| 2025-03-27 | AFK Letters Co Ltd | £90K | PECR | UK ICO | United Kingdom | marketing | It was found that between January and September 2023, AFK made 95,277 spam calls...It was found that between January and September 2023, AFK made 95,277 spam calls resulting in several complaints being made to the ICO and TPS. AFK did not provide evidence that anyone whose number had been called had consented to receiving calls from the company. The ICO has issued a £90,000 fine. |
| 2014-12-02 | Parklife Manchester Limited | £70K | PECR | UK ICO | United Kingdom | marketing | Sending of unsolicited marketing text messages by disguising the identity of the...Sending of unsolicited marketing text messages by disguising the identity of the person on whose behalf the messages were sent |
| 2012-04-24 | Aneurin Bevan Health Board | £70K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Personal data disclosed in error to incorrect recipient |
| 2012-05-15 | London Borough of Barnet | £70K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Case papers containing personal data stolen from staff members house |
| 2023-12-29 | SOCIETE PERMETTANT D'EFFECTUER DES PAIEMENTS EN LIGNE | €105K | French ePrivacy rules (cookies) | France CNIL | France | consent | Durée de conservation Information des personnes et transparence Défaut de sécuri...Durée de conservation Information des personnes et transparence Défaut de sécurité des données Consentement des personnes (cookies) |
| 2024-01-31 | EDITEUR DE SITE WEB PROPOSANT AUX PARTICULIERS DE PUBLIER OU CONSULTER DES ANNONCES IMMOBILIERES ET AUTRES SERVICES | €100K | GDPR | France CNIL | France | other | Défaut de sécurité des données Encadrement des relations entre le responsable de...Défaut de sécurité des données Encadrement des relations entre le responsable de traitement et le sous-traitant Information des personnes et transparence Durée de conservation |
| 2020-07-02 | Decision Technologies Limited | £90K | PECR | UK ICO | United Kingdom | marketing | Price comparison and technology company fined £90,000 for a contravention of Reg...Price comparison and technology company fined £90,000 for a contravention of Regulation 22 of the Privacy and Electronic Communications (EC Directive) Regulations 2003. |
| 2021-03-23 | Irish Credit Bureau DAC | €90K | GDPR | Ireland DPC | Ireland | other | This inquiry was commenced in respect of a personal data breach that the Irish C...This inquiry was commenced in respect of a personal data breach that the Irish Credit Bureau (‘ICB’) notified to the DPC on 31 August 2018. The ICB is a credit reference agency that… Articles: Art. 5, Art. 24, Art. 25, Art. 26 |
| 2012-03-12 | Lancashire Constabulary | £70K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Missing persons report containing personal data found in the street |
| 2011-02-04 | London Borough of Hounslow | £70K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Theft of unencrypted laptop containing personal data. Linked to ENF370035 |
| 2021-02-18 | Valca Vehicle Life Cover Agency Ltd | £80K | PECR | UK ICO | United Kingdom | marketing | Between 15 June 2020 and 20 July 2020 a total of 95,004 connected unsolicited di...Between 15 June 2020 and 20 July 2020 a total of 95,004 connected unsolicited direct marketing messages were received by subscribers, resulting in 114 complaints. |
| 2016-11-03 | Nouveau Finance Ltd | £70K | PECR | UK ICO | United Kingdom | marketing | A company that sent out 2.2 million illegal marketing text messages has been fin...A company that sent out 2.2 million illegal marketing text messages has been fined £70,000 and ordered to stop by the ICO. |
| 2018-06-18 | Our Vault Ltd | £70K | PECR | UK ICO | United Kingdom | marketing | Our Vault was fined £70,000 for making 55,534 unsolicited marketing calls to peo...Our Vault was fined £70,000 for making 55,534 unsolicited marketing calls to people who had registered with the Telephone Preference Service (TPS) and had not consented to being contacted by the company. |
| 2016-02-15 | Direct Security Marketing Limited | £70K | PECR | UK ICO | United Kingdom | marketing | 40,000 automated calls made in one day in an attempt to sell burglar alarms, alm...40,000 automated calls made in one day in an attempt to sell burglar alarms, almost a quarter of which were made between 1am and 6am. |
| 2017-10-10 | The Lead Experts Limited | £70K | PECR | UK ICO | United Kingdom | marketing | The Lead Experts Limited instigated the transmission of automated marketing call...The Lead Experts Limited instigated the transmission of automated marketing calls to subscribers without prior consent. |
| 2017-08-07 | London Borough of Islington | £70K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | North London council fined after parking ticket system flaw leaves personal info...North London council fined after parking ticket system flaw leaves personal information at risk |
| 2017-07-31 | H.P.A.S Limited t/a Safestyle UK | £70K | PECR | UK ICO | United Kingdom | marketing | Company made unsolicited direct marketing calls without the consent of the recip...Company made unsolicited direct marketing calls without the consent of the recipients. |
| 2017-07-06 | Nottinghamshire County Council | £70K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Information about service users published online by the council when seeking com...Information about service users published online by the council when seeking companies to apply for care contracts. The service users were identifiable by their address. |
| 2017-03-20 | Flybe Limited | £70K | PECR | UK ICO | United Kingdom | marketing | An investigation by the Information Commissioner’s Office found Exeter-based air...An investigation by the Information Commissioner’s Office found Exeter-based airline Flybe deliberately sent more than 3.3 million emails to people who had told them they didn’t want to receive marketing emails from the firm. |
| 2022-03-29 | H&L Business Consulting Limited | £80K | PECR | UK ICO | United Kingdom | marketing | Between 20 January 2020 and 27 July 2020, H&L Business Consulting Limited instig...Between 20 January 2020 and 27 July 2020, H&L Business Consulting Limited instigated the sending of 451,705 unsolicited SMS messages for direct marketing purposes in contravention to regulation 22 of PECR. |