Search Privacy Fines

Between 1 January 2020 and 31 July 2020, Domestic Support Limited made 69,133 unsolicited calls for direct marketing purposes in contravention of Regulation 21 of PECR, and also failed to provide the necessary caller information in contravention of Regulation 24 of PECR. The company has been fined £80,000.

Interdiction pour le sous-traitant de recruter un autre sous-traitant sans l'autorisation du responsable de traitement Défaut de sécurité des données

A total of 28,523,745 unsolicited direct marketing messages were sent without valid consent

Between the period 25 May 2018 to 6 September 2019, the Trust used Outlook to send bulk emails to 1,781 Gender Identity Clinic service users. The Trust failed to comply with Chapter II GDPR, specifically Articles 5(1)(f), and 32(1) & (2).

Between 5 May 2021 to 5 May 2022, there were 47,998 connected calls unsolicited direct marketing calls being made to subscribers who were registered with the TPS and who had not notified Pinnacle Life Limited that they were willing to receive such calls, and four complaints being submitted as a result. Pinnacle Life Limited came to the Commissioner's attention following a review of TPS complaints from December 2021. The TPS had been unable to identify the organisation making calls following a complaint regarding a call from "Pinnacle Insurance". The investigation demonstrated that callers were persistent, aggressive, rude at times and ignored requests from individuals not to be contacted.

WerepairUK Ltd made 42,688 marketing calls to individuals in breach of regulation 21 of PECR. The company has been fined £80,000 and issued with an enforcement notice.

Organisation made direct marketing calls to subscribers who were registered with the TPS or CTPS in contravention of Regulation 21

Ice Telecommunications Ltd made 72,682 unsolicited marketing calls to businesses registered with the CTPS or TPS between 13 September 2021 and 31 January 2022.

Organisation responsible for making 270,774 unsolicited direct marketing calls to subscribers on the TPS register without valid consent between 1 January 2018 and 29 November 2018.

The inquiry was commenced after VIEC notified a personal data breach to the DPC on 19 August 2020. VIEC operates and manages five nursing homes on the Southside of Dublin and in County…

Articles: Art. 5, Art. 32

A total of 2,565,513 direct marketing messages were received by subscribers having being sent by SportsDirect.com Retail Ltd

This inquiry was commenced in respect of 71 personal data breaches notified by Tusla to the DPC. The decision considered a broad range of Tusla’s processing operations and the findings…

Articles: Art. 5, Art. 32, Art. 33

Allapplianceservices UK Ltd (AUKL), based in Brighton, made 99,313 unsolicited direct marketing calls to people registered with the TPS between 1 January 2021 and 28 June 2021. AUKL came to the attention of the ICO via the Financial Conduct Authority. The ICO’s investigation found AUKL appeared to use pressure tactics during the calls insisting card details were given, with one person saying they “just wanted AUKL to go away” and so handed over their payment details. The ICO concluded the company contravened electronic marketing law in order to maximise turnover and profit. One of the complainants had reduced capacity as a result of a stroke, with a second having dementia. The ICO has fined AUKL £85,000.

Various incidents concerning the disclosure of personal data via email to incorrect recipient

Company sent of unsolicited direct marketing emails without the required consent.

SQL Injection attack that led to an attacker accessing the personal data, including financial information, of over 26,000 customers