Enforcement action

Pinnacle Life Limited

07 March 2024, Enforcement notices, Finance insurance and credit

Between 5 May 2021 to 5 May 2022, there were 47,998 connected calls unsolicited direct marketing calls being made to subscribers who were registered with the TPS and who had not notified Pinnacle Life Limited that they were willing to receive such calls, and four complaints being submitted as a result.

Pinnacle Life Limited

07 March 2024, Monetary penalties, Finance insurance and credit

Between 5 May 2021 to 5 May 2022, there were 47,998 connected calls unsolicited direct marketing calls being made to subscribers who were registered with the TPS and who had not notified Pinnacle Life Limited that they were willing to receive such calls, and four complaints being submitted as a result.

L.A.D.H Limited

19 January 2024, Enforcement notices, Finance insurance and credit

L.A.D.H Limited sent 31,329 direct market text messages to individuals in breach of regulation 22 and 23 of PECR. The company was fined £50,000 and issued with an enforcement notice.

L.A.D.H Limited

19 January 2024, Monetary penalties, Finance insurance and credit

L.A.D.H Limited sent 31,329 direct market text messages to individuals in breach of regulation 22 and 23 of PECR. The company was fined £50,000 and issued with an enforcement notice.

Bank of Ireland

30 November 2023, Reprimands, Finance insurance and credit

BOI failed to ensure the accuracy of customers’ default loan status which led to inaccurate personal data being held on their account which was subsequently incorrectly recorded on customers’ credit profile.

Optionis Group Limited

10 October 2023, Reprimands, Finance insurance and credit

The data controller suffered a ransomware attack, which resulted in the exfiltration of personal data. A reprimand was issued in respect of specific infringements of the UK GDPR, which include lack of multi-factor authentication, an inadequate account lockout policy, and no clear Bring Your Own Device policy.

Digivo Media Limited

03 October 2023, Enforcement notices, Finance insurance and credit

Between 24 March 2021 and 7 September 2021 there were 415,041 texts delivered without valid consent – breach of Regulation 22 of PECR. Digivo came to the ICO’s attention following a review of debt management complaints received via the SPAM reporting tool.

Digivo Media Limited

03 October 2023, Monetary penalties, Finance insurance and credit

Between 24 March 2021 and 7 September 2021 there were 415,041 texts delivered without valid consent – breach of Regulation 22 of PECR. Digivo came to the ICO’s attention following a review of debt management complaints received via the SPAM reporting tool.

MCP Online Ltd

28 September 2023, Enforcement notices, Finance insurance and credit

Between 1 January 2022 and 28 September 2022 there were 20,939 calls made to CTPS or TPS registered numbers – breach of Reg 21 and 24 of PECR. MCP came to the ICO’s attention following a review of complaints made to the Telephone Preference Service (TPS) in November 2021 as part of Operation Torc, which has been set up to investigate unsolicited pensions calls.

MCP Online Ltd

28 September 2023, Monetary penalties, Finance insurance and credit

Between 1 January 2022 and 28 September 2022 there were 20,939 calls made to CTPS or TPS registered numbers – breach of Reg 21 and 24 of PECR. MCP came to the ICO’s attention following a review of complaints made to the Telephone Preference Service (TPS) in November 2021 as part of Operation Torc, which has been set up to investigate unsolicited pensions calls.

Zuwyco Limited

11 November 2022, Monetary penalties, Finance insurance and credit

Between 1 January 2021 and 1 August 2021, Zuwyco Limited used a public telecommunications service for the purposes of making 93,558 unsolicited calls for direct marketing purposes to subscribers who had been listed on the TPS register for not less than 28 days, contrary to regulation 21(1)(b) of PECR. This resulted in seven complaints being made to the TPS and the Commissioner.

Zuwyco Limited

11 November 2022, Enforcement notices, Finance insurance and credit

Between 1 January 2021 and 1 August 2021, Zuwyco Limited used a public telecommunications service for the purposes of making 93,558 unsolicited calls for direct marketing purposes to subscribers who had been listed on the TPS register for not less than 28 days, contrary to regulation 21(1)(b) of PECR. This resulted in seven complaints being made to the TPS and the Commissioner.