Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
698 fines found
Total: $7.9B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2023-08-02 | SGS Home Protect Ltd | £70K | PECR | UK ICO | United Kingdom | marketing | SGS Home Protect Ltd made 24,214 marketing calls to individuals in breach of reg...SGS Home Protect Ltd made 24,214 marketing calls to individuals in breach of regulation 21 of PECR. The company was fined £70,000 and issued with an enforcement notice. |
| 2025-09-04 | SOCIETE EXERCANT UNE ACTIVITE DE GRANDE DISTRIBUTION | €75K | GDPR | France CNIL | France | other | Obligation de traiter les données de façon licite et transparente (vidéoprotecti...Obligation de traiter les données de façon licite et transparente (vidéoprotection); Minimisation des données (vidéosurveillance et vidéoprotection); Information des personnes (vidéosurveillance et vidéoprotection); Obligation de réaliser une analyse d'impact |
| 2025-05-15 | SOCIETE REALISANT DES OPERATIONS DE PROSPECTION COMMERCIALE PAR VOIE ELECTRONIQUE POUR LE COMPTE D'ANNONCEURS, AVEC UNE ACTIVITE DE COURTIER EN DONNEES | €80K | GDPR | France CNIL | France | other | Consentement des personnes (prospection commerciale par voie électronique - L. 3...Consentement des personnes (prospection commerciale par voie électronique - L. 34-5 CPCE); Retrait du consentement; Défaut de base légale; Durée de conservation |
| 2017-04-26 | Construction Materials Online Ltd | £55K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Online retailer left customers’ financial details vulnerable to cyber attack |
| 2014-07-24 | Reactiv Media Limited | £50K | PECR | UK ICO | United Kingdom | marketing | Making unsolicited marketing calls to individuals with the TPS |
| 2013-06-11 | North Staffordshire Combined Healthcare NHS Trust | £55K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Multiple faxes containing personal data sent to incorrect recipient |
| 2014-04-01 | Amber UPVC Fabrications Limited | £50K | PECR | UK ICO | United Kingdom | marketing | Making unsolicited marketing calls to individuals registered with the TPS |
| 2023-09-13 | RHAP Ltd | £65K | PECR | UK ICO | United Kingdom | marketing | RHAP Ltd made 15,288 marketing calls to individuals in breach of regulation 21 o...RHAP Ltd made 15,288 marketing calls to individuals in breach of regulation 21 of PECR. The company was fined £65,000 and issued with an enforcement notice. |
| 2020-04-07 | Tusla Child and Family Agency | €75K | GDPR | Ireland DPC | Ireland | other | This inquiry was commenced in respect of three personal data breaches notified b...This inquiry was commenced in respect of three personal data breaches notified by Tusla to the DPC. All three personal data breaches occurred in circumstances where Tusla failed to redact… Articles: Art. 32 |
| 2020-12-17 | University College Dublin | €70K | GDPR | Ireland DPC | Ireland | other | This inquiry was commenced in respect of 7 personal data breaches that Universit...This inquiry was commenced in respect of 7 personal data breaches that University College Dublin (‘UCD’) notified to the DPC between 8 August 2018 to 21 January 2019. The personal data… Articles: Art. 5, Art. 32, Art. 33 |
| 2012-10-29 | Prudential | £50K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Inaccuracy of customer records |
| 2023-10-26 | Argentum Data Solutions Ltd | £65K | PECR | UK ICO | United Kingdom | marketing | Between 1 January 2021 and 31 January 2022 there were a total of 2,330,423 SMS s...Between 1 January 2021 and 31 January 2022 there were a total of 2,330,423 SMS sent without consent. 24,309 were sent by ADS directly and it allowed its lines to be used by third parties to send the remaining 2,306,114. These messages were sent in breach of regulation 22 of PECR. ADS came to our attention following a review of complaints received by the 7726 spam reporting tool. |
| 2023-12-29 | SOCIETE DE SITES EN LIGNE DE JEUX-CONCOURS ET TESTS PRODUITS | €75K | GDPR | France CNIL | France | other | Obligation de traiter les données de façon licite (prospection commerciale) Regi...Obligation de traiter les données de façon licite (prospection commerciale) Registre des activités de traitement |
| 2022-04-11 | Finance Giant Ltd | £60K | PECR | UK ICO | United Kingdom | marketing | Between 1 and 30 November 2020 Finance Giant Ltd instigated the sending of a con...Between 1 and 30 November 2020 Finance Giant Ltd instigated the sending of a confirmed total of 505,759 unsolicited direct marketing messages that were received by subscribers contrary to regulation 22 of PECR. |
| 2015-08-05 | Point One Marketing Ltd | £50K | PECR | UK ICO | United Kingdom | marketing | Making unsolicited marketing calls to individuals registered with the TPS |
| 2017-06-19 | MyHome Installations Limited | £50K | PECR | UK ICO | United Kingdom | marketing | The company made unsolicited direct marketing calls without the consent of recip...The company made unsolicited direct marketing calls without the consent of recipients and failed to take reasonable steps to record the information of subscribers who had not given their prior consent to receiving marketing calls |
| 2017-08-08 | Home Logic UK Limited | £50K | PECR | UK ICO | United Kingdom | marketing | The company made unsolicited calls for direct marketing pusposes without consent...The company made unsolicited calls for direct marketing pusposes without consent of the recipients |
| 2017-05-12 | Brighter Home Solutions Ltd | £50K | PECR | UK ICO | United Kingdom | marketing | The company made unsolicited calls for the purpose of direct marketing without t...The company made unsolicited calls for the purpose of direct marketing without the consent of the recipients |
| 2017-01-18 | LAD Media Limited | £50K | PECR | UK ICO | United Kingdom | marketing | A marketing company sent unsolicited text messages for the purpose of direct mar...A marketing company sent unsolicited text messages for the purpose of direct marketing without the consent of the recipients. |
| 2017-10-04 | Xerpla Ltd | £50K | PECR | UK ICO | United Kingdom | marketing | Xerpla Ltd used a public telecommunications service for the purposes of transmit...Xerpla Ltd used a public telecommunications service for the purposes of transmitting unsolicited communications by means of electronic mail to individual subscribers without a valid consent of recipients. |
| 2016-05-09 | Better For The Country Ltd | £50K | PECR | UK ICO | United Kingdom | marketing | A company which sent more than 500,000 texts urging people to support its campai...A company which sent more than 500,000 texts urging people to support its campaign to leave the EU |
| 2016-04-25 | Nevis Home Improvements Ltd | £50K | PECR | UK ICO | United Kingdom | marketing | Automated calls being made promoting the firm’s home improvement services. |
| 2016-03-18 | Direct Choice Home Improvements Limited | £50K | PECR | UK ICO | United Kingdom | marketing | Unsolicited marketing calls being made relating to installation of home improvem...Unsolicited marketing calls being made relating to installation of home improvement products such as doors, windows, conservatories, kitchens and bathrooms |
| 2025-04-14 | DPP Law Ltd | £60K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | -- |
| 2022-11-28 | Repair Plans UK Limited | £70K | PECR | UK ICO | United Kingdom | marketing | Repair Plans UK Limited (RPUK), based in Brighton made 21,347 unsolicited direct...Repair Plans UK Limited (RPUK), based in Brighton made 21,347 unsolicited direct marketing calls to people registered with the TPS between 18 January 2021 and 7 September 2021. RPUK came to the attention of the ICO via West Sussex Trading Standards. The ICO’s investigation found the company targeted a specific demographic, as they bought data which asked for people aged 60+, were homeowners and had a landline, and made false and misleading statements during their calls. Throughout the investigation the company failed to provide any details of their compliant marketing procedures and the ICO found at least one incident of £180 being taken unnecessarily from a person’s bank account. The ICO has fined RPUK £70,000 and issued an enforcement notice demanding the company comply with the law within 30 days. |