Search Privacy Fines

Browse and filter privacy enforcement fines worldwide.

← Back to Overview

698 fines found

Total: $7.9B

DateCompanyFineRegulationAuthorityCountryTypeSummary
2024-09-19National Debt Advice Ltd£30KPECRUK ICOUnited Kingdommarketing
National Debt Advice sent 129,902 unsolicited direct marketing text messages to ...

National Debt Advice sent 129,902 unsolicited direct marketing text messages to individuals in breach of regulation 22 of PECR resulting in over 4,000 complaints to the 7726 spam reporting service. The company was fined £30,000 and issued with an enforcement notice.

2023-06-27Fortis Insolvency Limited£30KPECRUK ICOUnited Kingdommarketing
Fortis Insolvency Limited sent 558,354 direct marketing SMS messages without val...

Fortis Insolvency Limited sent 558,354 direct marketing SMS messages without valid consent with 527,481 received by subscribers between 26 July 2020 and 26 July 2021 in contravention of regulation 22 of PECR. The company was fined £30,000 and issued with an enforcement notice.

2022-09-02Halfords Limited£30KPECRUK ICOUnited Kingdommarketing
The Information Commissioner’s Office (ICO) has fined Halfords Limited £30,000 f...

The Information Commissioner’s Office (ICO) has fined Halfords Limited £30,000 for sending 498,179 unsolicited marketing emails to people without their consent.

2021-07-08Mermaids£25KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Failure to keep personal data secure
2024-11-13Sligo County Council€30KGDPRIreland DPCIrelandother
This inquiry is one of a number of own-volition inquiries into a broad range of ...

This inquiry is one of a number of own-volition inquiries into a broad range of issues pertaining to surveillance technologies deployed by State authorities. The inquiry sought to assess…

Articles: Art. S 79

2017-03-10Munee Hut LLP£20KPECRUK ICOUnited Kingdommarketing
A company that instructed a firm in Belize to send around 64,000 spam texts prom...

A company that instructed a firm in Belize to send around 64,000 spam texts promoting loans on its behalf has been fined £20,000 by the Information Commissioner’s Office.

2016-10-10Rainbow (UK) Ltd£20KPECRUK ICOUnited Kingdommarketing
--
2017-01-27The Data Supply Company£20KUK GDPR / DPA 2018UK ICOUnited Kingdomother
A data brokerage company traded personal data without the consent of the data su...

A data brokerage company traded personal data without the consent of the data subjects.

2016-03-30Advice Direct Limited£20KPECRUK ICOUnited Kingdommarketing
Live calls being made with a view to generating leads for potential claims for d...

Live calls being made with a view to generating leads for potential claims for damages in respect of hearing loss caused by working in a noisy environment

2018-04-25Costelloe & Kelly Ltd£19KPECRUK ICOUnited Kingdommarketing
Costelloe & Kelly Ltd undertook a direct text marketing campaign without a valid...

Costelloe & Kelly Ltd undertook a direct text marketing campaign without a valid consent to individuals in contravention of Regulation 22 of the Privacy and Electronic Communications (EC Directive) Regulations 2003.

2016-12-05British Heart Foundation£18KUK GDPR / DPA 2018UK ICOUnited Kingdomother
A Charity shared personal data belonging to its donors without their consent.
2017-04-03International Fund for Animal Welfare£18KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Wealth screening / data matching / data sharing
2021-09-20Your Home Improvements Ltd£20KPECRUK ICOUnited Kingdommarketing
1718 unsolicited calls were made by the Company for direct marketing purposes to...

1718 unsolicited calls were made by the Company for direct marketing purposes to people who were registered with the TPS. This resulted in 4 complaints being made to the TPS and the Commissioner.

2025-09-16Bharat Singh Chand£20KPECRUK ICOUnited Kingdommarketing
--
2012-01-12SOCIETE DE DIAGNOSTICS IMMOBILIERS€20KGDPRFrance CNILFranceother
Défaut de consentement préalable, défaut de consentement des personnes, non resp...

Défaut de consentement préalable, défaut de consentement des personnes, non respect du droit d'opposition; Immobilier - prospection commerciale

2017-04-03Cancer Research UK£16KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Wealth screening / data matching / data sharing
2017-04-03Cancer Support UK£16KUK GDPR / DPA 2018UK ICOUnited Kingdomother
Wealth screening / data matching / data sharing
2023-06-16Department of Health€23KGDPRIreland DPCIrelandother
The Data Protection Commission (DPC) has completed an inquiry into certain aspec...

The Data Protection Commission (DPC) has completed an inquiry into certain aspects of the Department of Health’s processing of personal data in 29 litigation files. The inquiry was…

Articles: Art. S 41, Art. S 47

2025-12-31UNIVERSITE (procédure simplifiée)€20KGDPRFrance CNILFranceother
Limitation des finalités
2026-01-29ÉTABLISSEMENT PUBLIC EXERÇANT UNE ACTIVITÉ DE TRANSPORT URBAIN (procédure simplifiée)€20KGDPRFrance CNILFranceother
Obligation de traiter les données de façon licite (vidéoprotection); Information...

Obligation de traiter les données de façon licite (vidéoprotection); Information des personnes; Défaut de sécurité des données

2025-12-08SOCIETE EXERCANT UNE ACTIVITE DE COMMERCE DE DETAIL (procédure simplifiée)€20KGDPRFrance CNILFranceother
Obligation de traiter les données de façon licite; Minimisation des données (vid...

Obligation de traiter les données de façon licite; Minimisation des données (vidéoprotection et vidéosurveillance); Durée de conservation; Information des personnes; Encadrement des relations entre le responsable de traitement et le sous-traitant; Défaut de sécurité des données; Obligation de réaliser une analyse d'impact

2025-12-11ETABLISSEMENT PUBLIC EXERCANT UNE ACTIVITE DE GESTION LOCATIVE DE LOGEMENTS (procédure simplifiée)€20KGDPRFrance CNILFranceother
Limitation des finalités; Minimisation des données; Information des personnes; N...

Limitation des finalités; Minimisation des données; Information des personnes; Non respect du droit d'opposition; Défaut de sécurité des données

2025-11-13GROUPEMENT D'INTERET ECONOMIQUE (GIE) EXERCANT UNE ACTIVITE D'ORGANISATION, DE DEVELOPPEMENT ET DE PROMOTION DE CENTRES COMMERCIAUX (procédure simplifiée)€20KGDPRFrance CNILFranceother
Obligation de traiter les données de façon licite (vidéoprotection); Minimisatio...

Obligation de traiter les données de façon licite (vidéoprotection); Minimisation des données (vidéosurveillance); Information des personnes; Encadrement des relations entre le responsable de traitement et le sous-traitant; Registre des activités de traitement; Défaut de sécurité des données; Obligation de réaliser une analyse d'impact

2025-12-18SOCIETE EXERCANT UNE ACTIVITE DE COLLECTE DE DONNEES PROVENANT DE JEUX CONCOURS, DE PROSPECTION COMMERCIALE ET DE TRANSMISSION DE DONNEES A SES CLIENTS (procédure simplifiée)€20KGDPRFrance CNILFranceother
Consentement des personnes (prospection commerciale par voie électronique - L. 3...

Consentement des personnes (prospection commerciale par voie électronique - L. 34-5 CPCE); Durée de conservation; Défaut de sécurité des données

2025-10-16SUPERMARCHE (procédure simplifiée)€20KGDPRFrance CNILFranceother
Obligation de traiter les données de façon licite (vidéoprotection); Minimisatio...

Obligation de traiter les données de façon licite (vidéoprotection); Minimisation des données (vidéosurveillance); Information des personnes

PreviousPage 18 of 28Next