Action we've taken Enforcement action 169 in total Boost Finance Limited 09 October 2018, Monetary penalties The Information Commissioner has fined London-based marketing company, Boost Finance Ltd (BFL), a company responsible for millions of nuisance emails about pre-paid funeral plans. Heathrow Airport 08 October 2018, Monetary penalties, Transport and leisure Heathrow Airport Limited (HAL) has been fined £120,000 by the Information Commissioner’s Office (ICO) for failing to ensure that the personal data held on its network was properly secured. Oaklands Assist UK Limited 01 October 2018, Monetary penalties, Marketing A Manchester firm has been fined £150,000 by the Information Commissioner’s Office (ICO) for making thousands of nuisance direct marketing phone calls. Bupa Insurance Services Ltd 28 September 2018, Monetary penalties, Health Bupa Insurance Services Limited (Bupa) has been fined £175,000 by the Information Commissioner’s Office (ICO) for failing to have effective security measures in place to protect customers’ personal information. Clare Lawson 24 September 2018, Prosecutions, Health A former nurse at Southport and Ormskirk Hospital NHS Trust has been prosecuted for accessing patients’ medical records without authorisation. Equifax Ltd 20 September 2018, Monetary penalties, Finance insurance and credit The Information Commissioner’s Office has issued Equifax Ltd with a £500,000 fine for failing to protect the personal information of up to 15 million UK citizens during a cyber attack in 2017. … London Borough of Lewisham 06 September 2018, Enforcement notices, Local government Enforcement notice for London Borough of Lewisham. Everything DM Ltd 05 September 2018, Monetary penalties, Marketing Everything DM Ltd (EDML), based in Stevenage, was fined £60,000 for sending 1.42 million emails without consent. Between May 2016 and May 2017, the firm used its direct marketing system called… Everything DM Ltd 04 September 2018, Enforcement notices, Marketing The Information Commissioner’s Office (ICO) has taken enforcement action against Everything DM Ltd (EDML) for sending 1.42 million emails without consent. Between May 2016 and May 2017, the firm… Lifecycle Marketing (Mother and Baby) Ltd 09 August 2018, Monetary penalties, Marketing The ICO has fined Lifecycle Marketing (Mother and Baby) Ltd, also known as Emma’s Diary, £140,000 for illegally collecting and selling personal information belonging to more than one million people.… AMS Marketing Ltd 01 August 2018, Monetary penalties, Marketing The Information Commissioner’s Office has fined AMS Marketing Ltd £100,000 for making 75,649 nuisance calls. Independent Inquiry into Child Sexual Abuse 18 July 2018, Monetary penalties, Central government Independent Inquiry into Child Sexual Abuse (IICSA) fined £200,000 for revealing identities of abuse victims in mass email. Noble Design and Build of Telford 03 July 2018, Prosecutions Noble Design and Build of Telford, Shropshire, which operates CCTV systems in buildings across Sheffield, broke data protection laws by failing to comply with an Information Notice. The company… Our Vault Ltd 28 June 2018, Enforcement notices, Finance insurance and credit The Information Commissioner’s Office (ICO) has taken enforcement action against two firms for making nuisance telephone calls - Our Vault Limited in Chorley, Lancashire, and Swansea-based Horizon Windows Limited. Enforcement Notices have been issued to both companies ordering the firms to stop their illegal marketing activity. Horizon Windows 28 June 2018, Enforcement notices, Retail and manufacture The Information Commissioner’s Office (ICO) has taken enforcement action against two firms for making nuisance telephone calls - Our Vault Limited in Chorley, Lancashire, and Swansea-based Horizon Windows Limited. Enforcement Notices have been issued to both companies ordering the firms to stop their illegal marketing activity. Our Vault Ltd 28 June 2018, Monetary penalties, Finance insurance and credit Our Vault was fined £70,000 for making 55,534 unsolicited marketing calls to people who had registered with the Telephone Preference Service (TPS) and had not consented to being contacted by the company. British Telecommunications plc 20 June 2018, Monetary penalties, Online technology and telecoms British Telecommunications plc (BT) has been fined £77,000 by the Information Commissioner’s Office after it sent nearly five million nuisance emails to customers. Ainsworth Lord Estates Limited 18 June 2018, Enforcement notices, Land or property services Ainsworth Lord Estates Limited has been served with an Enforcement Notice for failing to respond to a subject access request. Gloucestershire Police 11 June 2018, Monetary penalties, Criminal justice Gloucestershire Police fined for revealing identities of abuse victims in bulk email. Humberside Police 08 June 2018, Undertakings, Criminal justice The Chief Constable of Humberside Police has signed an undertaking to comply with the Seventh Data Protection Principle. The British & Foreign Bible Society c/o the Bible Society 07 June 2018, Monetary penalties The British and Foreign Bible Society, based in Swindon, has been fined £100,000 by the Information Commissioner’s Office, after their computer network was compromised as the result of a… Bayswater Medical Centre 23 May 2018, Monetary penalties, Health Bayswater Medical Centre in London has been fined £35,000 by the ICO after it left highly sensitive medical information in an empty building. West Midlands Police 21 May 2018, Undertakings, Criminal justice A follow up has been completed to provide an assurance that West Midlands Police has appropriately addressed the actions agreed in its undertaking signed 31 October 2017. The University of Greenwich 21 May 2018, Monetary penalties, Education and childcare The University of Greenwich has been fined £120,000 by the Information Commissioner following a “serious” security breach involving the personal data of nearly 20,000 people. Yahoo! UK Services Ltd 21 May 2018, Monetary penalties, Online technology and telecoms Yahoo! UK Services Limited, based in London, has been fined £250,000 by the Information Commissioner’s Office after their computer network was compromised as the result of a cyber-attack in November 2014. Loading results More