1. Action we've taken

Enforcement action

53 in total

Cathay Pacific

04 March 2020, Monetary penalties, Transport and leisure

Cathay Pacific Airways Limited £500,000 for failing to protect the security of its customers’ personal data. Between October 2014 and May 2018 Cathay Pacific’s computer systems lacked appropriate…

CRDNN Limited

02 March 2020, Monetary penalties, Marketing

CRDNN Limited fined with the maximum £500,000 fine for making more than 193 million automated nuisance calls.

DSG Retail Ltd

09 January 2020, Monetary penalties, Retail and manufacture

The Information Commissioner’s Office (ICO) has fined DSG Retail Limited (DSG) £500,000 after a ‘point of sale’ computer system was compromised as a result of a cyber-attack, affecting at least 14 million people.

Doorstep Dispensaree Ltd

20 December 2019, Monetary penalties, Health

The Information Commissioner’s Office (ICO) has fined a London-based pharmacy £275,000 for failing to ensure the security of special category data. Doorstep Dispensaree Ltd, which supplies medicines to customers and care homes, left approximately 500,000 documents in unlocked containers at the back of its premises in Edgware. The documents included names, addresses, dates of birth, NHS numbers, medical information and prescriptions belonging to an unknown number of people.

Superior Style Home Improvements Ltd

17 September 2019, Monetary penalties, Marketing

Superior Style Home Improvements Ltd issued with monetary penalty notice after making unsolicited marketing calls to individuals registered with the TPS to try and generate UPVC installation leads.

Making it Easy Ltd

02 August 2019, Monetary penalties, Retail and manufacture

Making it Easy Ltd has been fined £160,000 by the Information Commissioner’s Office (ICO) for making spam calls to people registered with the Telephone Preference Service (TPS).

Life at Parliament View Limited

19 July 2019, Monetary penalties, Land or property services

Life at Parliament View Ltd fined £80,000 for leaving 18,610 customers' personal data exposed for almost two years.

EE Limited

24 June 2019, Monetary penalties, Online technology and telecoms

EE Limited fined £100,000 for sending over 2.5 million direct marketing messages to its customers, without consent.  

Smart Home Protection Ltd

13 June 2019, Monetary penalties, Land or property services

The Information Commissioner’s Office (ICO) has fined Smart Home Protection Ltd £90,000 for making nuisance calls to people registered with the Telephone Preference Service (TPS).  

Hall and Hanley Ltd

07 May 2019, Monetary penalties, Finance insurance and credit

Organisation fined £120,000 for the sending of 3,560,211 direct marketing messages to subscribers without consent. 

Avalon Direct Ltd

16 April 2019, Monetary penalties, General business

Avalon Direct Ltd made almost 52,000 calls to people who were registered with the Telephone Preference Service (TPS) between 1 March and 20 November 2017.

Bounty (UK) Ltd

11 April 2019, Monetary penalties, Membership association

Bounty UK fined £400,000 for sharing personal data unlawfully.

True Visions Productions

10 April 2019, Monetary penalties, Media

ICO fines television company £120,000 for unfair and unlawful filming in maternity clinic.

London Borough of Newham

04 April 2019, Monetary penalties

The Information Commissioner’s Office (ICO) has fined the London Borough of Newham £145,000 for disclosing the personal information of more than 200 people who featured on a police intelligence…

Grove Pension Solutions Limited

26 March 2019, Monetary penalties, Finance insurance and credit

A Kent pensions company which relied on 'misleading' professional advice has been fined £40,000 by the Information Commissioner's Office for being responsible for sending nearly two million direct marketing emails without consent.

Vote Leave Limited

19 March 2019, Monetary penalties, Political

The Information Commissioner’s Office (ICO) has fined Vote Leave Limited £40,000 for sending out thousands of unsolicited text messages in the run up to the 2016 EU referendum.

Leave.EU Group Limited (Incident 2)

01 February 2019, Monetary penalties, Marketing

Leave.EU Group Limited has been fined £15,000 for sending almost 300,000 unsolicited communications on a single day for which they did not have consent. 

Leave.EU Group Limited (Incident 1)

01 February 2019, Monetary penalties, Marketing

Leave.EU Group Limited has been fined £45,000 for sending unsolicited direct marketing emails without the required consent. 

Eldon Insurance Services Limited (trading as GoSkippy Insurance)

01 February 2019, Monetary penalties, Finance insurance and credit

Eldon Insurance Services Limited (trading as GoSkippy Insurance) has been fined £60,000 for instigating the sending of unsolicited direct marketing emails without the required consent.

Alistar Green Legal Services Limited

31 January 2019, Monetary penalties, Marketing

Alistar Green Legal Services Limited based in Liverpool has been fined £80,000 for making 213 nuisance calls to TPS subscribers between March and July 2017.

Tax Returned Limited

13 December 2018, Monetary penalties, Marketing

Tax Returned Limited based in London has been fined £200,000 for sending out 14.8 million marketing text messages without valid consent through a third party service provider between July 2016 and October 2017.

Finance sector - organisations fined for non-payment of data protection fee

28 November 2018, Monetary penalties, Finance insurance and credit

Organisations across the finance sector are among the first to be fined by the ICO for not paying the data protection fee.

Manufacturing sector - organisations fined for non-payment of data protection fee

28 November 2018, Monetary penalties, Retail and manufacture

Organisations across the manufacturing sector are among the first to be fined by the ICO for not paying the data protection fee.

Business sector - organisations fined for non-payment of data protection fee

28 November 2018, Monetary penalties, General business

Organisations across the business sector are among the first to be fined by the ICO for not paying the data protection fee.

Uber

26 November 2018, Monetary penalties, Transport and leisure

The Information Commissioner’s Office (ICO) has fined ride sharing company Uber £385,000 for failing to protect customers’ personal information during a cyber attack.