Search Privacy Fines

Holmes Financial Solutions Ltd fined £300,000 after they instigated the transmission of automated marketing calls to individuals without their prior consent.

Non respect des principes de minimisation des données et de responsabilité Durée de conservation Défaut de sécurité des données

Défaut de sécurité des données personnelles et non-respect des durées de conservation

The MOD sent emails inadvertently using the “To” field rather than the “Bcc” field. 265 unique email addresses were disclosed in breach of GDPR Article 5(1)(f). The MOD were fined £350,000.

The Information Commissioner’s Office (ICO) has fined a London-based pharmacy £275,000 for failing to ensure the security of special category data.

Marketing Company made unsolicited automated marketing calls without the consent of the recipients

Durée de conservation Consentement des personnes (données de santé) Encadrement des relations entre le responsable de traitement et le sous-traitant Défaut de sécurité des données Consentement des personnes (cookies et traceurs)

Easyleads Limited made unsolicited automated marketing calls without consent of recipients

Yahoo! UK Services Limited has been fined £250,000 by the Information Commissioner’s Office (ICO) following a cyber-attack in November 2014. The incident was publicly disclosed in September 2016, almost two years after it had taken place.

A company who made over 6 million automated marketing calls relating to hearing loss claims

Unsolicited calls for direct marketing purposes to subscribers who had registered with the Telephone Preference Service in contravention of Regulation 21 of the Privacy and Electronic Communications (EC Directive) Regulations 2003.

Barrington Claims Ltd fined £250,000 after they failed to ensure automated marketing calls were sent to individuals who had consented to receive marketing.

Newday Ltd fined £230,000 after they failed to ensure automated emails were sent to individuals who had consented to receive marketing.

Non respect du droit d'accès Non respect du droit de rectification Non respect du droit d'opposition Obligation de protéger les données dès la conception Défaut de sécurité des données

On the 10 June 2026 the Data Protection Commission adopted its final decision following an inquiry into a ransomware attack on the laboratory information system in Midlands Regional…

Articles: Art. 5, Art. 28, Art. 30, Art. 32, Art. 34

Obligation de traiter les données de façon licite (prospection commerciale par téléphone)

Leads Work Limited sent 2,670,140 marketing text messages to individuals without their consent, resulting in excess of 10,000 complaints, over a period of 41 days.

Hacker threatened to publish thousands of names of people who sought advice on abortion, pregnancy and contraception

Obligation de réaliser une analyse d'impact Information des personnes et consentement Obligation de traiter les données de façon licite

Reliance Advisory Limited fined £250,000 for breaking electronic marketing law. Over a six month period from the start of 2019, the Bury-based company made 15.1 million calls in relation to claims management services such as mis-sold PPI. All of the calls, of which 1.1 million connected, were made to people who had not consented to receive them.

Between 1 January 2019 and 28 May 2019 Pownall Marketing Limited used a public electronic communications service for the purpose of making 365,369 unsolicited calls for direct marketing purposes to subscribers in relation to claims management services, resulting in 63 complaints.