The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.


Enforcement action

Part of our role is to take action to ensure organisations meet their information rights obligations. In this section we publish details of the action we have taken, including fines, enforcement notices, decision notices and more.


What action have we taken?

Find out what we're doing about spam texts, marketing calls and cookies.

Monetary penalty notices

The ICO has had the power to issue monetary penalty notices of up to £500,000 for serious breaches of the Data Protection Act occuring on or after 6 April 2010, and serious breaches of the Privacy and Electronic Communications Regulations.

Decision notices

The Information Commissioner's final view on whether a public authority has complied with the Freedom of Information Act or the Environmental Information Regulations.


We use this page to show trends in statistics for data breaches reported to the ICO.


View details of organisations committing to a particular course of action in order to improve its compliance.

Enforcement notices

Read the enforcement notices and ‘stop now’ orders we have issued to organisations in breach of the legislation, requiring them to take specified steps in order to ensure they comply with the law.


Details of the criminal prosecutions under the legislation.

Also of interest

  • Taking action

    Read about what we can do.

  • News releases

    Data protection and freedom of information news from the ICO.

  • ICO blog

    Our thoughts on current information rights issues.