Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
698 fines found
Total: $7.9B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2026-04-30 | Permanent TSB | €278K | GDPR | Ireland DPC | Ireland | other | The inquiry commenced following Permanent TSB’s (‘PTSB’) notification to the DPC...The inquiry commenced following Permanent TSB’s (‘PTSB’) notification to the DPC of a series of three data breaches relating to PTSB’s ‘Open 24 Contact Centre’. Each of the data breach… Articles: Art. 5, Art. 32, Art. 33 |
| 2025-12-29 | SOCIETE EDITANT UNE APPLICATION MOBILE | €270K | French ePrivacy rules (cookies) | France CNIL | France | consent | Défaut de sécurité des données; Consentement des personnes (données sensibles); ...Défaut de sécurité des données; Consentement des personnes (données sensibles); Consentement des personnes (cookies) |
| 2015-11-02 | Crown Prosecution Service | £200K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Laptops containing videos of police interviews were stolen from a private film s...Laptops containing videos of police interviews were stolen from a private film studio |
| 2015-10-21 | Help Direct UK Limited | £200K | PECR | UK ICO | United Kingdom | marketing | Sending out thousands of unsolicited marketing text messages. People complained ...Sending out thousands of unsolicited marketing text messages. People complained about a variety of messages offering services including the reclaim of PPI payments, bank refunds and loans. |
| 2015-09-25 | Home Energy & Lifestyle Management Ltd | £200K | PECR | UK ICO | United Kingdom | marketing | A green energy company who made over six million calls as part of a automated ca...A green energy company who made over six million calls as part of a automated call marketing campaign offering ‘free’ solar panels. |
| 2018-12-10 | Tax Returned Limited | £200K | PECR | UK ICO | United Kingdom | marketing | Company sent unsolicited text messages for direct marketing purposes without the...Company sent unsolicited text messages for direct marketing purposes without the consent of the recipients |
| 2018-07-05 | Independent Inquiry into Child Sexual Abuse | £200K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Independent Inquiry into Child Sexual Abuse (IICSA) fined £200,000 for revealing...Independent Inquiry into Child Sexual Abuse (IICSA) fined £200,000 for revealing identities of abuse victims in mass email |
| 2021-01-06 | COMMERCE DE DÉTAIL D'OPTIQUE | €250K | GDPR | France CNIL | France | other | Non-respect de l'exercice des droits des personnes Défaut de sécurité des donnée...Non-respect de l'exercice des droits des personnes Défaut de sécurité des données |
| 2014-08-20 | Ministry of Justice | £180K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Loss of hard drives containing sensitive and confidential information at prisons |
| 2014-01-14 | Department of Justice Northern Ireland | £185K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Filing cabinet containing details of a terrorist incident was sold at auction |
| 2013-06-18 | NHS Surrey | £200K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | Insecure disposal of hard drives containing personal data |
| 2023-10-26 | Outsource Strategies Ltd | £240K | PECR | UK ICO | United Kingdom | marketing | Outsource Strategies Ltd made 1,346,503 unwanted marketing calls between 11 Febr...Outsource Strategies Ltd made 1,346,503 unwanted marketing calls between 11 February 2021 and 22 March 2022 to numbers registered with the TPS. The ICO received 74 complaints from people variously saying they received repeated calls despite requests to stop and that the callers were aggressive. |
| 2025-10-16 | SOCIETE DE CENTRES D'APPELS | €250K | GDPR | France CNIL | France | other | Minimisation des données; Durée de conservation; Défaut de sécurité des données |
| 2022-11-30 | OPERATEUR DE TELECOMMUNICATION FIXE | €300K | GDPR | France CNIL | France | other | Modalités d'exercice des droits; Non respect du droit d'accès Non respect du dro...Modalités d'exercice des droits; Non respect du droit d'accès Non respect du droit à l'effacement Obligation de documenter une violation de données Défaut de sécurité des données |
| 2015-11-17 | Blackpool Teaching Hospitals NHS Foundation Trust | £185K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | A health trust that posted the private details of 6,574 members of staff on its ...A health trust that posted the private details of 6,574 members of staff on its website |
| 2013-12-16 | First Financial (UK) Limited | £175K | PECR | UK ICO | United Kingdom | marketing | Sending unsolicited direct marketing texts to mobile subscribers who had not con...Sending unsolicited direct marketing texts to mobile subscribers who had not consented to receive them. |
| 2016-06-07 | Advanced VoIP Solutions Limited | £180K | PECR | UK ICO | United Kingdom | marketing | Automated calls being made relating to PPI, packaged bank accounts and flight de...Automated calls being made relating to PPI, packaged bank accounts and flight delays |
| 2016-05-04 | Chelsea & Westminster Hospital NHS Foundation Trust | £180K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | A health trust revealed the email addresses of more than 700 users of a HIV serv...A health trust revealed the email addresses of more than 700 users of a HIV service |
| 2016-03-14 | FEP Heatcare Ltd | £180K | PECR | UK ICO | United Kingdom | marketing | Automated calls being made relating to boiler replacements. |
| 2015-08-04 | Instant Cash Loans Ltd trading as the Money Shop | £180K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | The theft and loss of servers containing customer data. |
| 2015-03-26 | Serious Fraud Office | £180K | UK GDPR / DPA 2018 | UK ICO | United Kingdom | other | A witness in a serious fraud, bribery and corruption investigation was mistakenl...A witness in a serious fraud, bribery and corruption investigation was mistakenly sent evidence relating to 64 other people involved in the case |
| 2020-07-28 | COMMERCE EN LIGNE | €250K | GDPR | France CNIL | France | other | Manquement au principe de minimisation des données ; manquement relatif à la dur...Manquement au principe de minimisation des données ; manquement relatif à la durée de conservation ; manquement relatif à l'information des personnes ; manquement à l'obligation d'assurer la sécurité et la confidentialité des données |
| 2021-09-15 | We Buy Any Car Ltd | £200K | PECR | UK ICO | United Kingdom | marketing | We Buy Any Car Ltd sent 191.4 million marketing emails and 3.6 million marketing...We Buy Any Car Ltd sent 191.4 million marketing emails and 3.6 million marketing SMS messages to individuals without fully satisfying the requirements of soft opt in, resulting in 42 complaints to the Commissioner, over a period of 12 months |
| 2021-06-25 | Brazier Consulting Services Limited | £200K | PECR | UK ICO | United Kingdom | marketing | Over 11 million unlawful claims management calls were made |
| 2016-03-18 | Falcon & Pointer Limited | £175K | PECR | UK ICO | United Kingdom | marketing | Automated calls being made relating to PPI and packaged bank accounts |