Search Privacy Fines

Browse and filter privacy enforcement fines worldwide.

← Back to Overview

698 fines found

Total: $7.9B

DateCompanyFineRegulationAuthorityCountryTypeSummary
2025-12-10University of Limerick€98KGDPRIreland DPCIrelandother
This Decision arises from an own-volition inquiry into the University of Limeric...

This Decision arises from an own-volition inquiry into the University of Limerick (‘UL’) following a series of personal data breaches that occurred between November 2018 and January 2020…

Articles: Art. 5, Art. 30, Art. 32, Art. 33, Art. 34

2022-02-07Tempcover Ltd£85KPECRUK ICOUnited Kingdommarketing
Between 26 May 2019 and 26 May 2020, a total of 29,970,419 unsolicited direct ma...

Between 26 May 2019 and 26 May 2020, a total of 29,970,419 unsolicited direct marketing messages were received by subscribers, having been sent by Tempcover Ltd without valid consent. The ICO has fined them £85,000.

2013-07-30Bank of Scotland£75KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Multiple faxes containing personal data sent to incorrect recipient
2012-12-12London Borough of Lewisham£70KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Personal data left on a train
2012-10-09Norwood Ravenswood£70KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Personal data left outside of residential property
2025-03-27AFK Letters Co Ltd£90KPECRUK ICOUnited Kingdommarketing
It was found that between January and September 2023, AFK made 95,277 spam calls...

It was found that between January and September 2023, AFK made 95,277 spam calls resulting in several complaints being made to the ICO and TPS. AFK did not provide evidence that anyone whose number had been called had consented to receiving calls from the company. The ICO has issued a £90,000 fine.

2014-12-02Parklife Manchester Limited£70KPECRUK ICOUnited Kingdommarketing
Sending of unsolicited marketing text messages by disguising the identity of the...

Sending of unsolicited marketing text messages by disguising the identity of the person on whose behalf the messages were sent

2012-04-24Aneurin Bevan Health Board£70KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Personal data disclosed in error to incorrect recipient
2012-05-15London Borough of Barnet£70KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Case papers containing personal data stolen from staff members house
2023-12-29SOCIETE PERMETTANT D'EFFECTUER DES PAIEMENTS EN LIGNE€105KFrench ePrivacy rules (cookies)France CNILFranceconsent
Durée de conservation Information des personnes et transparence Défaut de sécuri...

Durée de conservation Information des personnes et transparence Défaut de sécurité des données Consentement des personnes (cookies)

2024-01-31EDITEUR DE SITE WEB PROPOSANT AUX PARTICULIERS DE PUBLIER OU CONSULTER DES ANNONCES IMMOBILIERES ET AUTRES SERVICES€100KGDPRFrance CNILFranceother
Défaut de sécurité des données Encadrement des relations entre le responsable de...

Défaut de sécurité des données Encadrement des relations entre le responsable de traitement et le sous-traitant Information des personnes et transparence Durée de conservation

2020-07-02Decision Technologies Limited£90KPECRUK ICOUnited Kingdommarketing
Price comparison and technology company fined £90,000 for a contravention of Reg...

Price comparison and technology company fined £90,000 for a contravention of Regulation 22 of the Privacy and Electronic Communications (EC Directive) Regulations 2003.

2021-03-23Irish Credit Bureau DAC€90KGDPRIreland DPCIrelandother
This inquiry was commenced in respect of a personal data breach that the Irish C...

This inquiry was commenced in respect of a personal data breach that the Irish Credit Bureau (‘ICB’) notified to the DPC on 31 August 2018. The ICB is a credit reference agency that…

Articles: Art. 5, Art. 24, Art. 25, Art. 26

2012-03-12Lancashire Constabulary£70KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Missing persons report containing personal data found in the street
2011-02-04London Borough of Hounslow£70KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Theft of unencrypted laptop containing personal data. Linked to ENF370035
2021-02-18Valca Vehicle Life Cover Agency Ltd£80KPECRUK ICOUnited Kingdommarketing
Between 15 June 2020 and 20 July 2020 a total of 95,004 connected unsolicited di...

Between 15 June 2020 and 20 July 2020 a total of 95,004 connected unsolicited direct marketing messages were received by subscribers, resulting in 114 complaints.

2016-11-03Nouveau Finance Ltd£70KPECRUK ICOUnited Kingdommarketing
A company that sent out 2.2 million illegal marketing text messages has been fin...

A company that sent out 2.2 million illegal marketing text messages has been fined £70,000 and ordered to stop by the ICO.

2018-06-18Our Vault Ltd£70KPECRUK ICOUnited Kingdommarketing
Our Vault was fined £70,000 for making 55,534 unsolicited marketing calls to peo...

Our Vault was fined £70,000 for making 55,534 unsolicited marketing calls to people who had registered with the Telephone Preference Service (TPS) and had not consented to being contacted by the company.

2016-02-15Direct Security Marketing Limited£70KPECRUK ICOUnited Kingdommarketing
40,000 automated calls made in one day in an attempt to sell burglar alarms, alm...

40,000 automated calls made in one day in an attempt to sell burglar alarms, almost a quarter of which were made between 1am and 6am.

2017-10-10The Lead Experts Limited£70KPECRUK ICOUnited Kingdommarketing
The Lead Experts Limited instigated the transmission of automated marketing call...

The Lead Experts Limited instigated the transmission of automated marketing calls to subscribers without prior consent.

2017-08-07London Borough of Islington£70KUK GDPR / DPA 2018UK ICOUnited Kingdomother
North London council fined after parking ticket system flaw leaves personal info...

North London council fined after parking ticket system flaw leaves personal information at risk

2017-07-31H.P.A.S Limited t/a Safestyle UK£70KPECRUK ICOUnited Kingdommarketing
Company made unsolicited direct marketing calls without the consent of the recip...

Company made unsolicited direct marketing calls without the consent of the recipients.

2017-07-06Nottinghamshire County Council£70KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Information about service users published online by the council when seeking com...

Information about service users published online by the council when seeking companies to apply for care contracts. The service users were identifiable by their address.

2017-03-20Flybe Limited£70KPECRUK ICOUnited Kingdommarketing
An investigation by the Information Commissioner’s Office found Exeter-based air...

An investigation by the Information Commissioner’s Office found Exeter-based airline Flybe deliberately sent more than 3.3 million emails to people who had told them they didn’t want to receive marketing emails from the firm.

2022-03-29H&L Business Consulting Limited£80KPECRUK ICOUnited Kingdommarketing
Between 20 January 2020 and 27 July 2020, H&L Business Consulting Limited instig...

Between 20 January 2020 and 27 July 2020, H&L Business Consulting Limited instigated the sending of 451,705 unsolicited SMS messages for direct marketing purposes in contravention to regulation 22 of PECR.

PreviousPage 13 of 28Next