1. Action we've taken

Enforcement action

86 in total

Nicola Young

13 March 2020, Prosecutions, Local government

A Town Clerk at Whitchurch Town Council has been prosecuted for intentionally blocking records with the intent to prevent disclosure.  

Cathay Pacific

04 March 2020, Monetary penalties, Transport and leisure

Cathay Pacific Airways Limited £500,000 for failing to protect the security of its customers’ personal data. Between October 2014 and May 2018 Cathay Pacific’s computer systems lacked appropriate…

CRDNN Limited

02 March 2020, Enforcement notices, Marketing

CRDNN Limited issued with enforcement notice after making more than 193 million automated nuisance calls.

CRDNN Limited

02 March 2020, Monetary penalties, Marketing

CRDNN Limited fined with the maximum £500,000 fine for making more than 193 million automated nuisance calls.

Leo Kirk

15 January 2020, Prosecutions, Social care

A former social worker has been prosecuted for passing the personal information of service users to a third party provider for Local Authority young person placements.

DSG Retail Ltd

09 January 2020, Monetary penalties, Retail and manufacture

The Information Commissioner’s Office (ICO) has fined DSG Retail Limited (DSG) £500,000 after a ‘point of sale’ computer system was compromised as a result of a cyber-attack, affecting at least 14 million people.

Doorstep Dispensaree Ltd

20 December 2019, Monetary penalties, Health

The Information Commissioner’s Office (ICO) has fined a London-based pharmacy £275,000 for failing to ensure the security of special category data. Doorstep Dispensaree Ltd, which supplies medicines to customers and care homes, left approximately 500,000 documents in unlocked containers at the back of its premises in Edgware. The documents included names, addresses, dates of birth, NHS numbers, medical information and prescriptions belonging to an unknown number of people.

Doorstep Dispensaree Ltd

20 December 2019, Enforcement notices, Health

The Information Commissioner’s Office (ICO) has fined a London-based pharmacy £275,000 for failing to ensure the security of special category data. Doorstep Dispensaree Ltd, which supplies medicines to customers and care homes, left approximately 500,000 documents in unlocked containers at the back of its premises in Edgware. The documents included names, addresses, dates of birth, NHS numbers, medical information and prescriptions belonging to an unknown number of people.

Dannyelle Shaw

05 December 2019, Prosecutions, Local government

A former Reablement Officer at Walsall Metropolitan Borough Council has been prosecuted for accessing social care records without authorisation.

Michelle Shipsey

02 December 2019, Prosecutions, Local government

A former Social Services Support Officer at Dorset County Council has been prosecuted for accessing Social Care records without authorisation.

Superior Style Home Improvements Ltd

17 September 2019, Monetary penalties, Marketing

Superior Style Home Improvements Ltd issued with monetary penalty notice after making unsolicited marketing calls to individuals registered with the TPS to try and generate UPVC installation leads.

Superior Style Home Improvements Ltd

17 September 2019, Enforcement notices, Marketing

Superior Style Home Improvements Ltd issued with enforcement notice after making unsolicited marketing calls to individuals registered with the TPS to try and generate UPVC installation leads.

Hudson Bay Finance Ltd

12 August 2019, Enforcement notices, Finance insurance and credit

Hudson Bay Finance Ltd issued with an enforcement notice for failing to respond to a subject access request.

Making it Easy Ltd

02 August 2019, Enforcement notices, Retail and manufacture

Making it Easy Ltd has been fined £160,000 by the Information Commissioner’s Office (ICO) for making spam calls to people registered with the Telephone Preference Service (TPS). The ICO has also issued an enforcement notice to Making it Easy Ltd ordering it to stop its illegal marketing activity.

Making it Easy Ltd

02 August 2019, Monetary penalties, Retail and manufacture

Making it Easy Ltd has been fined £160,000 by the Information Commissioner’s Office (ICO) for making spam calls to people registered with the Telephone Preference Service (TPS).

Life at Parliament View Limited

19 July 2019, Monetary penalties, Land or property services

Life at Parliament View Ltd fined £80,000 for leaving 18,610 customers' personal data exposed for almost two years.

Metropolitan Police Service

25 June 2019, Enforcement notices, Criminal justice

Enforcement notices served under the 1998 and 2018 Data Protection Acts for sustained failures to comply with individuals' rights in respect of subject access requests.

EE Limited

24 June 2019, Monetary penalties, Online technology and telecoms

EE Limited fined £100,000 for sending over 2.5 million direct marketing messages to its customers, without consent.  

David Cullen

24 June 2019, Prosecutions, General business

A former managing director of a claims management company who unlawfully obtained and sold personal data has been prosecuted. David Cullen was the managing director of No1 Accident Claims Limited based in Manchester. The core business of the company was the obtaining and subsequent sale of personal data relating to policy holders of car insurance who had been involved in road traffic accidents. Cullen, of Manchester, appeared before Manchester Crown Court on 21 counts of unlawfully obtaining and selling personal data in breach of s55 of the Data Protection Act 1998. He was sentenced to a fine totalling £1050.00, ordered to pay costs of £250.00 and was disqualified from being a director for five years. Confiscation under the Proceeds of Crime Act 2002 was commenced with the benefit figure from the illegal activity totalling £1,434,679.60. Due to Cullen’s lack of assets, a £1 nominal order was made.

Smart Home Protection Ltd

13 June 2019, Monetary penalties, Land or property services

The Information Commissioner’s Office (ICO) has fined Smart Home Protection Ltd £90,000 for making nuisance calls to people registered with the Telephone Preference Service (TPS).  

Wendy Masterson

07 June 2019, Prosecutions, Land or property services

A former customer service advisor at Stockport Homes has been prosecuted for accessing records relating to anti-social behaviour with authorisation.

Jeannette Baines

06 June 2019, Prosecutions, Charitable and voluntary

A Restorative Justice Caseworker has been prosecuted for sending sensitive personal data to her own personal email account without authorisation.  

Her Majesty's Revenue and Customs

10 May 2019, Enforcement notices, Central government

HMRC issued with an enforcement notice for failing to get adequate consent to collect callers' personal data.

Hall and Hanley Ltd

07 May 2019, Monetary penalties, Finance insurance and credit

Organisation fined £120,000 for the sending of 3,560,211 direct marketing messages to subscribers without consent. 

Avalon Direct Ltd

16 April 2019, Monetary penalties, General business

Avalon Direct Ltd made almost 52,000 calls to people who were registered with the Telephone Preference Service (TPS) between 1 March and 20 November 2017.