Part of our role is to take action to ensure organisations meet their information rights obligations. In this section we publish details of the action we have taken, including fines, enforcement notices, decision notices and more.
Find out what we're doing about spam texts, marketing calls and cookies.
The ICO has had the power to issue monetary penalty notices of up to £500,000 for serious breaches of the Data Protection Act occuring on or after 6 April 2010, and serious breaches of the Privacy and Electronic Communications Regulations.
The Information Commissioner's final view on whether a public authority has complied with the Freedom of Information Act or the Environmental Information Regulations.
We use this page to show trends in statistics for data breaches reported to the ICO.
View details of organisations committing to a particular course of action in order to improve its compliance.
Read the enforcement notices and ‘stop now’ orders we have issued to organisations in breach of the legislation, requiring them to take specified steps in order to ensure they comply with the law.
Details of the criminal prosecutions under the legislation.