Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
698 fines found
Total: $7.9B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2024-09-19 | National Debt Advice Ltd | £30K | PECR | UK ICO | United Kingdom | marketing | National Debt Advice sent 129,902 unsolicited direct marketing text messages to ...National Debt Advice sent 129,902 unsolicited direct marketing text messages to individuals in breach of regulation 22 of PECR resulting in over 4,000 complaints to the 7726 spam reporting service. The company was fined £30,000 and issued with an enforcement notice. |
| 2023-06-27 | Fortis Insolvency Limited | £30K | PECR | UK ICO | United Kingdom | marketing | Fortis Insolvency Limited sent 558,354 direct marketing SMS messages without val...Fortis Insolvency Limited sent 558,354 direct marketing SMS messages without valid consent with 527,481 received by subscribers between 26 July 2020 and 26 July 2021 in contravention of regulation 22 of PECR. The company was fined £30,000 and issued with an enforcement notice. |
| 2022-09-02 | Halfords Limited | £30K | PECR | UK ICO | United Kingdom | marketing | The Information Commissioner’s Office (ICO) has fined Halfords Limited £30,000 f...The Information Commissioner’s Office (ICO) has fined Halfords Limited £30,000 for sending 498,179 unsolicited marketing emails to people without their consent. |
| 2021-07-08 | Mermaids | £25K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Failure to keep personal data secure |
| 2024-11-13 | Sligo County Council | €30K | GDPR | Ireland DPC | Ireland | other | This inquiry is one of a number of own-volition inquiries into a broad range of ...This inquiry is one of a number of own-volition inquiries into a broad range of issues pertaining to surveillance technologies deployed by State authorities. The inquiry sought to assess… Articles: Art. S 79 |
| 2017-03-10 | Munee Hut LLP | £20K | PECR | UK ICO | United Kingdom | marketing | A company that instructed a firm in Belize to send around 64,000 spam texts prom...A company that instructed a firm in Belize to send around 64,000 spam texts promoting loans on its behalf has been fined £20,000 by the Information Commissioner’s Office. |
| 2016-10-10 | Rainbow (UK) Ltd | £20K | PECR | UK ICO | United Kingdom | marketing | -- |
| 2017-01-27 | The Data Supply Company | £20K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | A data brokerage company traded personal data without the consent of the data su...A data brokerage company traded personal data without the consent of the data subjects. |
| 2016-03-30 | Advice Direct Limited | £20K | PECR | UK ICO | United Kingdom | marketing | Live calls being made with a view to generating leads for potential claims for d...Live calls being made with a view to generating leads for potential claims for damages in respect of hearing loss caused by working in a noisy environment |
| 2018-04-25 | Costelloe & Kelly Ltd | £19K | PECR | UK ICO | United Kingdom | marketing | Costelloe & Kelly Ltd undertook a direct text marketing campaign without a valid...Costelloe & Kelly Ltd undertook a direct text marketing campaign without a valid consent to individuals in contravention of Regulation 22 of the Privacy and Electronic Communications (EC Directive) Regulations 2003. |
| 2016-12-05 | British Heart Foundation | £18K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | A Charity shared personal data belonging to its donors without their consent. |
| 2017-04-03 | International Fund for Animal Welfare | £18K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Wealth screening / data matching / data sharing |
| 2021-09-20 | Your Home Improvements Ltd | £20K | PECR | UK ICO | United Kingdom | marketing | 1718 unsolicited calls were made by the Company for direct marketing purposes to...1718 unsolicited calls were made by the Company for direct marketing purposes to people who were registered with the TPS. This resulted in 4 complaints being made to the TPS and the Commissioner. |
| 2025-09-16 | Bharat Singh Chand | £20K | PECR | UK ICO | United Kingdom | marketing | -- |
| 2012-01-12 | SOCIETE DE DIAGNOSTICS IMMOBILIERS | €20K | GDPR | France CNIL | France | other | Défaut de consentement préalable, défaut de consentement des personnes, non resp...Défaut de consentement préalable, défaut de consentement des personnes, non respect du droit d'opposition; Immobilier - prospection commerciale |
| 2017-04-03 | Cancer Research UK | £16K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Wealth screening / data matching / data sharing |
| 2017-04-03 | Cancer Support UK | £16K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Wealth screening / data matching / data sharing |
| 2023-06-16 | Department of Health | €23K | GDPR | Ireland DPC | Ireland | other | The Data Protection Commission (DPC) has completed an inquiry into certain aspec...The Data Protection Commission (DPC) has completed an inquiry into certain aspects of the Department of Health’s processing of personal data in 29 litigation files. The inquiry was… Articles: Art. S 41, Art. S 47 |
| 2025-12-31 | UNIVERSITE (procédure simplifiée) | €20K | GDPR | France CNIL | France | other | Limitation des finalités |
| 2026-01-29 | ÉTABLISSEMENT PUBLIC EXERÇANT UNE ACTIVITÉ DE TRANSPORT URBAIN (procédure simplifiée) | €20K | GDPR | France CNIL | France | other | Obligation de traiter les données de façon licite (vidéoprotection); Information...Obligation de traiter les données de façon licite (vidéoprotection); Information des personnes; Défaut de sécurité des données |
| 2025-12-08 | SOCIETE EXERCANT UNE ACTIVITE DE COMMERCE DE DETAIL (procédure simplifiée) | €20K | GDPR | France CNIL | France | other | Obligation de traiter les données de façon licite; Minimisation des données (vid...Obligation de traiter les données de façon licite; Minimisation des données (vidéoprotection et vidéosurveillance); Durée de conservation; Information des personnes; Encadrement des relations entre le responsable de traitement et le sous-traitant; Défaut de sécurité des données; Obligation de réaliser une analyse d'impact |
| 2025-12-11 | ETABLISSEMENT PUBLIC EXERCANT UNE ACTIVITE DE GESTION LOCATIVE DE LOGEMENTS (procédure simplifiée) | €20K | GDPR | France CNIL | France | other | Limitation des finalités; Minimisation des données; Information des personnes; N...Limitation des finalités; Minimisation des données; Information des personnes; Non respect du droit d'opposition; Défaut de sécurité des données |
| 2025-11-13 | GROUPEMENT D'INTERET ECONOMIQUE (GIE) EXERCANT UNE ACTIVITE D'ORGANISATION, DE DEVELOPPEMENT ET DE PROMOTION DE CENTRES COMMERCIAUX (procédure simplifiée) | €20K | GDPR | France CNIL | France | other | Obligation de traiter les données de façon licite (vidéoprotection); Minimisatio...Obligation de traiter les données de façon licite (vidéoprotection); Minimisation des données (vidéosurveillance); Information des personnes; Encadrement des relations entre le responsable de traitement et le sous-traitant; Registre des activités de traitement; Défaut de sécurité des données; Obligation de réaliser une analyse d'impact |
| 2025-12-18 | SOCIETE EXERCANT UNE ACTIVITE DE COLLECTE DE DONNEES PROVENANT DE JEUX CONCOURS, DE PROSPECTION COMMERCIALE ET DE TRANSMISSION DE DONNEES A SES CLIENTS (procédure simplifiée) | €20K | GDPR | France CNIL | France | other | Consentement des personnes (prospection commerciale par voie électronique - L. 3...Consentement des personnes (prospection commerciale par voie électronique - L. 34-5 CPCE); Durée de conservation; Défaut de sécurité des données |
| 2025-10-16 | SUPERMARCHE (procédure simplifiée) | €20K | GDPR | France CNIL | France | other | Obligation de traiter les données de façon licite (vidéoprotection); Minimisatio...Obligation de traiter les données de façon licite (vidéoprotection); Minimisation des données (vidéosurveillance); Information des personnes |