The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

Enforcement action

9 in total

CPS Advisory Limited

10 September 2020, Monetary penalties

Swansea company CPS Advisory Ltd was fined £130,000 for making more than 100,000 unauthorised direct marketing calls to people about their pensions.

Koypo Laboratories Ltd

12 August 2020, Monetary penalties, Marketing

Organisation is responsible for instigating the transmission of 21,166,574 unsolicited communications by means of electronic mail to subscribers for the purposes of direct marketing between 1 March 2017 and 31 March 2018 without their consent.

Rain Trading Ltd

03 August 2020, Monetary penalties, Marketing

Organisation responsible for making 270,774 unsolicited direct marketing calls to subscribers on the TPS register without valid consent between 1 January 2018 and 29 November 2018.

Decision Technologies Limited

02 July 2020, Monetary penalties, Marketing

Price comparison and technology company fined £90,000 for a contravention of Regulation 22 of the Privacy and Electronic Communications (EC Directive) Regulations 2003

Black Lion Marketing Ltd

27 March 2020, Monetary penalties, Marketing

Black Lion Marketing Ltd fined £171,000 for making unsolicited direct marketing calls.

Cathay Pacific

04 March 2020, Monetary penalties, Transport and leisure

Cathay Pacific Airways Limited £500,000 for failing to protect the security of its customers’ personal data. Between October 2014 and May 2018 Cathay Pacific’s computer systems lacked appropriate…

CRDNN Limited

02 March 2020, Monetary penalties, Marketing

CRDNN Limited fined with the maximum £500,000 fine for making more than 193 million automated nuisance calls.

DSG Retail Ltd

09 January 2020, Monetary penalties, Retail and manufacture

The Information Commissioner’s Office (ICO) has fined DSG Retail Limited (DSG) £500,000 after a ‘point of sale’ computer system was compromised as a result of a cyber-attack, affecting at least 14 million people.

Doorstep Dispensaree Ltd

20 December 2019, Monetary penalties, Health

The Information Commissioner’s Office (ICO) has fined a London-based pharmacy £275,000 for failing to ensure the security of special category data. Doorstep Dispensaree Ltd, which supplies medicines to customers and care homes, left approximately 500,000 documents in unlocked containers at the back of its premises in Edgware. The documents included names, addresses, dates of birth, NHS numbers, medical information and prescriptions belonging to an unknown number of people.