Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
698 fines found
Total: $7.9B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2017-01-11 | IT Protect Ltd | £40K | PECR | UK ICO | United Kingdom | marketing | A marketing company made unsolicited direct marketing calls without the consent ...A marketing company made unsolicited direct marketing calls without the consent of the recipients |
| 2023-10-03 | Digivo Media Limited | £50K | PECR | UK ICO | United Kingdom | marketing | Between 24 March 2021 and 7 September 2021 there were 415,041 texts delivered wi...Between 24 March 2021 and 7 September 2021 there were 415,041 texts delivered without valid consent – breach of Regulation 22 of PECR. Digivo came to the ICO’s attention following a review of debt management complaints received via the SPAM reporting tool. |
| 2021-10-25 | Unite the Union | £45K | PECR | UK ICO | United Kingdom | marketing | Multiple breaches of Regulation 21 arising from the organisation's activities ov...Multiple breaches of Regulation 21 arising from the organisation's activities over a 12-mth period, resulting in 57,665 unsolicited direct marketing calls to subscribers who were registered with the TPS, which led to 27 complaints |
| 2021-07-27 | PRESSE | €50K | French ePrivacy rules (cookies) | France CNIL | France | consent | Consentement des personnes (cookies) |
| 2020-12-07 | Pension House Exchange Limited | £45K | PECR | UK ICO | United Kingdom | marketing | The Information Commissioner’s Office (ICO) has fined Pension House Exchange Lim...The Information Commissioner’s Office (ICO) has fined Pension House Exchange Limited has been fined £45,000 for making 39,722 connected unsolicited calls for the purposes of direct marketing in relation to occupational pension schemes or personal pension schemes contrary to regulation 21B of PECR |
| 2015-11-05 | SOCIETE DE DISTRIBUTION DE PRODUITS OPTIQUES | €50K | GDPR | France CNIL | France | other | défaut de sécurité et de confidentialité des données, y compris celles gérées pa...défaut de sécurité et de confidentialité des données, y compris celles gérées par un sous-traitant; Gestion des données des clients et des prospects |
| 2018-05-21 | Bayswater Medical Centre | £35K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Highly sensitive medical information left in an empty building for more than 18 ...Highly sensitive medical information left in an empty building for more than 18 months. |
| 2023-01-16 | Kildare County Council | €50K | GDPR | Ireland DPC | Ireland | other | This inquiry sought to assess whether Kildare County Council was processing pers...This inquiry sought to assess whether Kildare County Council was processing personal data in compliance with the GDPR and the Data Protection Act 2018. The inquiry examined a number of the… Articles: Art. 5, Art. 13, Art. 32 |
| 2022-04-20 | Reed Online Ltd | £40K | PECR | UK ICO | United Kingdom | marketing | Reed Online Limited fined £40,000 for breaching the Privacy and Electronic Commu...Reed Online Limited fined £40,000 for breaching the Privacy and Electronic Communications Regulations. |
| 2020-10-06 | Studios MG Limited | £40K | PECR | UK ICO | United Kingdom | marketing | Studios MG Limited fined £40,000 for sending thousands of unlawful marketing ema...Studios MG Limited fined £40,000 for sending thousands of unlawful marketing emails to people without their permission |
| 2023-08-03 | Simply Connecting Ltd | £40K | PECR | UK ICO | United Kingdom | marketing | Simply Connecting Ltd sent 441,830 direct marketing text messages to individuals...Simply Connecting Ltd sent 441,830 direct marketing text messages to individuals in breach of regulation 22 of PECR. The company was fined £40,000 and issued with an enforcement notice. |
| 2024-08-13 | Service Box Group Ltd | £40K | PECR | UK ICO | United Kingdom | marketing | Service Box Group Limited made 5,361 marketing calls to individuals in breach of...Service Box Group Limited made 5,361 marketing calls to individuals in breach of regulation 21 of PECR. The company has been fined £40,000 and issued with an enforcement notice. |
| 2024-08-15 | Coastal Windows & Conservatories | £40K | PECR | UK ICO | United Kingdom | marketing | Coastal Windows & Conservatories Limited made over 18,000 unsolicited marketing ...Coastal Windows & Conservatories Limited made over 18,000 unsolicited marketing calls between 1 January and 1 June 2023 to numbers registered with the TPS. The ICO and TPS received numerous complaints from people variously saying they had not consented to receiving such calls or received repeated calls despite requests to stop. |
| 2016-09-12 | Carfinance 247 Limited | £30K | PECR | UK ICO | United Kingdom | marketing | A brokerage Company used a public telecommunications service for the purpose of ...A brokerage Company used a public telecommunications service for the purpose of instigating unsolicited direct marketing text messages |
| 2015-12-15 | Telegraph Media Group Ltd | £30K | PECR | UK ICO | United Kingdom | marketing | Sending hundreds of thousands of emails urging readers to vote Conservative in g...Sending hundreds of thousands of emails urging readers to vote Conservative in general election. |
| 2016-11-03 | Assist Law Limited | £30K | PECR | UK ICO | United Kingdom | marketing | A company that provides will making and related services made unsolicited direct...A company that provides will making and related services made unsolicited direct marketing telephone calls to members of the public. |
| 2016-11-25 | Oracle Insurance Brokers Limited | £30K | PECR | UK ICO | United Kingdom | marketing | A marketing company instigated the transmission of unsolicited text messages, fo...A marketing company instigated the transmission of unsolicited text messages, for the purpose of direct marketing, without the consent of the recipients. |
| 2024-12-19 | SOCIETE EXERCANT UNE ACTIVITE D'AGENCE IMMOBILIERE | €40K | GDPR | France CNIL | France | other | Minimisation des données (vidéosurveillance) Obligation de traiter les données d...Minimisation des données (vidéosurveillance) Obligation de traiter les données de façon licite (vidéosurveillance) Information des personnes Défaut de sécurité des données Obligation de réaliser une analyse d'impact |
| 2022-09-30 | Green Logic UK Ltd | £40K | PECR | UK ICO | United Kingdom | marketing | Between 1 January 2020 and 31 December 2020, Green Logic UK Ltd used a public te...Between 1 January 2020 and 31 December 2020, Green Logic UK Ltd used a public telecommunications service for the purposes of making 11,825 unsolicited calls for direct marketing purposes. |
| 2020-05-21 | Tusla Child and Family Agency | €40K | GDPR | Ireland DPC | Ireland | other | This inquiry was commenced in respect of one personal data breach notified by Tu...This inquiry was commenced in respect of one personal data breach notified by Tusla to the DPC. The personal data breach occurred when a social worker for Tusla wrote a safeguarding letter… Articles: Art. 32, Art. 33 |
| 2025-08-28 | Home Improvement Marketing Ltd | £30K | PECR | UK ICO | United Kingdom | marketing | -- |
| 2022-03-07 | Royal Mail Group Limited | £30K | PECR | UK ICO | United Kingdom | marketing | -- |
| 2022-04-06 | Bizfella Limited | £30K | PECR | UK ICO | United Kingdom | marketing | Between 15 November 2019 and 15 July 2020 Bizfella Limited instigated the sendin...Between 15 November 2019 and 15 July 2020 Bizfella Limited instigated the sending of 224,550 unsolicited direct marketing SMS messages that were received by subscribers contrary to regulation 22 of PECR. They have been issued with a penalty notice for £30 000. |
| 2016-12-05 | The Royal Society for the Prevention of Cruelty to Animals | £25K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | A charity shared personal data belonging to its donors without their consent. |
| 2023-08-03 | This Is The Big Deal Limited | £30K | PECR | UK ICO | United Kingdom | marketing | This Is The Big Deal Limited sent or instigated the sending of 41,417,889 unsoli...This Is The Big Deal Limited sent or instigated the sending of 41,417,889 unsolicited direct marketing messages (39,906,342 emails and 1,511,547 text messages) to individuals who had not consented to receiving such messages, in contravention of regulation 22 of PECR. 102,132 of the text messages were sent without the necessary opt-out information as required by regulation 23 of PECR. The company was fined £30,000. |