Enforcement action

<!doctype html>    <html lang="en">  <head prefix="og: http://ogp.me/ns#"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="initial-scale=1.0, width=device-width"> <title>Enforcement action | ICO</title>   <meta name="DC.Subject" content="" /> <meta name="DC.Date" content="Wednesday, January 5, 2022" /> <meta name="DC.Creator" content="" /> <meta name="DC.Publisher" content="ICO" /> <meta name="DC.Title" content="Enforcement action" /> <meta name="DC.PageID" content="4062" />  <meta name="robots" content="index" />   <meta property="og:title" content="Enforcement action" /> <meta property="og:type" content="website" /> <meta property="og:url" content="https://ico.org.uk/action-weve-taken/enforcement/" /> <meta property="og:description" content="See the latest monetary penalties, enforcement notices, undertakings and prosecutions we have issued." /> <meta property="og:image" content="https://ico.org.uk/media/1412/pen-1000x671.jpg"/> <meta name="twitter:title" content="Enforcement action" /> <meta name="twitter:description" content="See the latest monetary penalties, enforcement notices, undertakings and prosecutions we have issued." /> <meta name="twitter:image" content="https://ico.org.uk/media/1412/pen-1000x671.jpg" /> <meta name="twitter:card" content="summary_large_image" />  <link rel="shortcut icon" type="image/x-icon" href="/favicon.ico" /> <link href="/cassette.axd/stylesheet/84c7d16c3755e24397d10a8f144f328c1ebc2032/css" type="text/css" rel="stylesheet"/>   <script type="text/javascript"> !function(T,l,y){var S=T.location,k="script",D="instrumentationKey",C="ingestionendpoint",I="disableExceptionTracking",E="ai.device.",b="toLowerCase",w="crossOrigin",N="POST",e="appInsightsSDK",t=y.name||"appInsights";(y.name||T[e])&&(T[e]=t);var n=T[t]||function(d){var g=!1,f=!1,m={initialize:!0,queue:[],sv:"5",version:2,config:d};function v(e,t){var n={},a="Browser";return n[E+"id"]=a[b](),n[E+"type"]=a,n["ai.operation.name"]=S&&S.pathname||"_unknown_",n["ai.internal.sdkVersion"]="javascript:snippet_"+(m.sv||m.version),{time:function(){var e=new Date;function t(e){var t=""+e;return 1===t.length&&(t="0"+t),t}return e.getUTCFullYear()+"-"+t(1+e.getUTCMonth())+"-"+t(e.getUTCDate())+"T"+t(e.getUTCHours())+":"+t(e.getUTCMinutes())+":"+t(e.getUTCSeconds())+"."+((e.getUTCMilliseconds()/1e3).toFixed(3)+"").slice(2,5)+"Z"}(),iKey:e,name:"Microsoft.ApplicationInsights."+e.replace(/-/g,"")+"."+t,sampleRate:100,tags:n,data:{baseData:{ver:2}}}}var h=d.url||y.src;if(h){function a(e){var t,n,a,i,r,o,s,c,u,p,l;g=!0,m.queue=[],f||(f=!0,t=h,s=function(){var e={},t=d.connectionString;if(t)for(var n=t.split(";"),a=0;a<n.length;a++){var i=n[a].split("=");2===i.length&&(e[i[0][b]()]=i[1])}if(!e[C]){var r=e.endpointsuffix,o=r?e.location:null;e[C]="https://"+(o?o+".":"")+"dc."+(r||"services.visualstudio.com")}return e}(),c=s[D]||d[D]||"",u=s[C],p=u?u+"/v2/track":d.endpointUrl,(l=[]).push((n="SDK LOAD Failure: Failed to load Application Insights SDK script (See stack for details)",a=t,i=p,(o=(r=v(c,"Exception")).data).baseType="ExceptionData",o.baseData.exceptions=[{typeName:"SDKLoadFailed",message:n.replace(/\./g,"-"),hasFullStack:!1,stack:n+"\nSnippet failed to load ["+a+"] -- Telemetry is disabled\nHelp Link: https://go.microsoft.com/fwlink/?linkid=2128109\nHost: "+(S&&S.pathname||"_unknown_")+"\nEndpoint: "+i,parsedStack:[]}],r)),l.push(function(e,t,n,a){var i=v(c,"Message"),r=i.data;r.baseType="MessageData";var o=r.baseData;return o.message='AI (Internal): 99 message:"'+("SDK LOAD Failure: Failed to load Application Insights SDK script (See stack for details) ("+n+")").replace(/\"/g,"")+'"',o.properties={endpoint:a},i}(0,0,t,p)),function(e,t){if(JSON){var n=T.fetch;if(n&&!y.useXhr)n(t,{method:N,body:JSON.stringify(e),mode:"cors"});else if(XMLHttpRequest){var a=new XMLHttpRequest;a.open(N,t),a.setRequestHeader("Content-type","application/json"),a.send(JSON.stringify(e))}}}(l,p))}function i(e,t){f||setTimeout(function(){!t&&m.core||a()},500)}var e=function(){var n=l.createElement(k);n.src=h;var e=y[w];return!e&&""!==e||"undefined"==n[w]||(n[w]=e),n.onload=i,n.onerror=a,n.onreadystatechange=function(e,t){"loaded"!==n.readyState&&"complete"!==n.readyState||i(0,t)},n}();y.ld<0?l.getElementsByTagName("head")[0].appendChild(e):setTimeout(function(){l.getElementsByTagName(k)[0].parentNode.appendChild(e)},y.ld||0)}try{m.cookie=l.cookie}catch(p){}function t(e){for(;e.length;)!function(t){m[t]=function(){var e=arguments;g||m.queue.push(function(){m[t].apply(m,e)})}}(e.pop())}var n="track",r="TrackPage",o="TrackEvent";t([n+"Event",n+"PageView",n+"Exception",n+"Trace",n+"DependencyData",n+"Metric",n+"PageViewPerformance","start"+r,"stop"+r,"start"+o,"stop"+o,"addTelemetryInitializer","setAuthenticatedUserContext","clearAuthenticatedUserContext","flush"]),m.SeverityLevel={Verbose:0,Information:1,Warning:2,Error:3,Critical:4};var s=(d.extensionConfig||{}).ApplicationInsightsAnalytics||{};if(!0!==d[I]&&!0!==s[I]){var c="onerror";t(["_"+c]);var u=T[c];T[c]=function(e,t,n,a,i){var r=u&&u(e,t,n,a,i);return!0!==r&&m["_"+c]({message:e,url:t,lineNumber:n,columnNumber:a,error:i}),r},d.autoExceptionInstrumented=!0}return m}(y.cfg);function a(){y.onInit&&y.onInit(n)}(T[t]=n).queue&&0===n.queue.length?(n.queue.push(a),n.trackPageView({})):a()}(window,document,{ src: "https://js.monitor.azure.com/scripts/b/ai.2.min.js", crossOrigin: "anonymous", cfg: { instrumentationKey: "1d8b12b7-5ec8-4f8a-ad58-d9c6836b2133", disableCookiesUsage: true }}); </script> <script src="/cassette.axd/script/5ee23aacdf970dd872941ccf4f703a43bccb2949/scripts/responsive-nav.min.js" type="text/javascript"></script> <script src="/cassette.axd/script/e959342b74f6ed9b82c2aa42af0bcf7fd59f2d10/scripts/lib" type="text/javascript"></script>    </head> <body id="top" class=""> <a class="link-skiptocontent invisible" href="#startcontent">Skip to main content <span class="icon-arrow-down"></span></a> <header class="header-banner"> <div class="container-header"> <div class="container row"> <div class="column column-3 siteheader-logo"> <a href="/"><span class="invisible">ICO: Information Commissioner's Office</span></a> </div> <div class="column column-6 siteheader-strapline h4"> <div class="siteheader-strapline-inner"> <p>The ICO exists to empower you through information.</p> </div> </div> <a href="" class="button-icon" id="toggle-siteheader-search"><span class="icon-search"></span><span class="invisible">Search</span><span class="icon-close"></span></a> <form action="https://icosearch.ico.org.uk/s/search.html" method="GET" class="column column-3" id="siteheader-search"> <fieldset> <legend class="invisible">Search</legend> <div class="siteheader-search-form"> <label for="search" class="invisible">Search</label> <input type="search" id="search" name="query"> <input type="hidden" name="collection" value="ico-meta" /> <input type="hidden" name="profile" value="_default" /> <span class="button-icon icon-search"></span> <input type="submit" value="Search"> </div> </fieldset> </form> </div> </div> <div class="container-navigation"> <div class="container row"> <nav class="column column-12" aria-label="Main menu"> <ul> <li class="h3 theme-home"> <a href="/">Home<span class="icon-arrow-right"></span></a> </li> <li class="h3 theme-public"> <a href="/for-the-public/">For the public<span class="icon-arrow-right"></span></a> </li> <li class="h3 theme-organisations"> <a href="/for-organisations/">For organisations<span class="icon-arrow-right"></span></a> </li> <li class="h3 theme-report"> <a href="/make-a-complaint/">Make a complaint<span class="icon-arrow-right"></span></a> </li> <li class="h3 theme-action"> <a href="/action-weve-taken/" class="current">Action we've taken<span class="icon-arrow-right"></span></a> </li> <li class="h3 theme-about"> <a href="/about-the-ico/">About the ICO<span class="icon-arrow-right"></span></a> </li> </ul> </nav> </div> </div> </header> <main class="theme-action" id="startcontent"> <article class="container"> <header class="pageheader"> <div class="row"> <div class="column column-8"> <nav aria-label="breadcrumb" class="pageheader-breadcrumb text-small clearfix"> <ol> <li> <a href="/action-weve-taken/">Action we've taken</a><span>/</span> </li> <li> <span class="current" aria-current="page" aria-label="Current page"> Enforcement </span> </li> </ol> </nav> <h1>Enforcement action</h1> </div> </div> </header> <div class="row"> <div class="filtercolumn column column-3"> <aside class="filters filter-collapse closed" aria-hidden="false" style="-webkit-transition: max-height 250ms; transition: max-height 250ms; position: relative;"> <form method="GET"> <fieldset> <legend class="invisible">Filters</legend> <h2 class="h4">Filters</h2> <h3> Type </h3> <ul class="form-checkbox-list"> <li> <input type="checkbox" id="checkbox-facet_type-all" class="checkboxlist-all" name="facet_type" value="" checked="" > <label for="checkbox-facet_type-all">All</label> </li> <li> <input type="checkbox" id="checkbox-facet_type-52657072696D616E6473" name="facet_type" value="Reprimands" > <label for="checkbox-facet_type-52657072696D616E6473">Reprimands <span class="filter-count text-small">86</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_type-4D6F6E65746172792070656E616C74696573" name="facet_type" value="Monetary penalties" > <label for="checkbox-facet_type-4D6F6E65746172792070656E616C74696573">Monetary penalties <span class="filter-count text-small">43</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_type-456E666F7263656D656E74206E6F7469636573" name="facet_type" value="Enforcement notices" > <label for="checkbox-facet_type-456E666F7263656D656E74206E6F7469636573">Enforcement notices <span class="filter-count text-small">41</span></label> </li> </ul> <h3> Sector </h3> <ul class="form-checkbox-list"> <li> <input type="checkbox" id="checkbox-facet_sector-all" class="checkboxlist-all" name="facet_sector" value="" checked="" > <label for="checkbox-facet_sector-all">All</label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-4D61726B6574696E67" name="facet_sector" value="Marketing" > <label for="checkbox-facet_sector-4D61726B6574696E67">Marketing <span class="filter-count text-small">34</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-4372696D696E616C206A757374696365" name="facet_sector" value="Criminal justice" > <label for="checkbox-facet_sector-4372696D696E616C206A757374696365">Criminal justice <span class="filter-count text-small">17</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-4C6F63616C20676F7665726E6D656E74" name="facet_sector" value="Local government" > <label for="checkbox-facet_sector-4C6F63616C20676F7665726E6D656E74">Local government <span class="filter-count text-small">15</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-46696E616E636520696E737572616E636520616E6420637265646974" name="facet_sector" value="Finance insurance and credit" > <label for="checkbox-facet_sector-46696E616E636520696E737572616E636520616E6420637265646974">Finance insurance and credit <span class="filter-count text-small">14</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-4865616C7468" name="facet_sector" value="Health" > <label for="checkbox-facet_sector-4865616C7468">Health <span class="filter-count text-small">13</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-43656E7472616C20676F7665726E6D656E74" name="facet_sector" value="Central government" > <label for="checkbox-facet_sector-43656E7472616C20676F7665726E6D656E74">Central government <span class="filter-count text-small">10</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-47656E6572616C20627573696E657373" name="facet_sector" value="General business" > <label for="checkbox-facet_sector-47656E6572616C20627573696E657373">General business <span class="filter-count text-small">6</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-52657461696C20616E64206D616E7566616374757265" name="facet_sector" value="Retail and manufacture" > <label for="checkbox-facet_sector-52657461696C20616E64206D616E7566616374757265">Retail and manufacture <span class="filter-count text-small">5</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-5574696C6974696573" name="facet_sector" value="Utilities" > <label for="checkbox-facet_sector-5574696C6974696573">Utilities <span class="filter-count text-small">5</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-4F6E6C696E6520746563686E6F6C6F677920616E642074656C65636F6D73" name="facet_sector" value="Online technology and telecoms" > <label for="checkbox-facet_sector-4F6E6C696E6520746563686E6F6C6F677920616E642074656C65636F6D73">Online technology and telecoms <span class="filter-count text-small">4</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-456475636174696F6E20616E64206368696C6463617265" name="facet_sector" value="Education and childcare" > <label for="checkbox-facet_sector-456475636174696F6E20616E64206368696C6463617265">Education and childcare <span class="filter-count text-small">3</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-43686172697461626C6520616E6420766F6C756E74617279" name="facet_sector" value="Charitable and voluntary" > <label for="checkbox-facet_sector-43686172697461626C6520616E6420766F6C756E74617279">Charitable and voluntary <span class="filter-count text-small">2</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-4C6567616C" name="facet_sector" value="Legal" > <label for="checkbox-facet_sector-4C6567616C">Legal <span class="filter-count text-small">2</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-5472616E73706F727420616E64206C656973757265" name="facet_sector" value="Transport and leisure" > <label for="checkbox-facet_sector-5472616E73706F727420616E64206C656973757265">Transport and leisure <span class="filter-count text-small">2</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-4C616E64206F722070726F7065727479207365727669636573" name="facet_sector" value="Land or property services" > <label for="checkbox-facet_sector-4C616E64206F722070726F7065727479207365727669636573">Land or property services <span class="filter-count text-small">1</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-4D65646961" name="facet_sector" value="Media" > <label for="checkbox-facet_sector-4D65646961">Media <span class="filter-count text-small">1</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-506F6C69746963616C" name="facet_sector" value="Political" > <label for="checkbox-facet_sector-506F6C69746963616C">Political <span class="filter-count text-small">1</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-526567756C61746F7273" name="facet_sector" value="Regulators" > <label for="checkbox-facet_sector-526567756C61746F7273">Regulators <span class="filter-count text-small">1</span></label> </li> <li> <input type="checkbox" id="checkbox-facet_sector-536F6369616C2063617265" name="facet_sector" value="Social care" > <label for="checkbox-facet_sector-536F6369616C2063617265">Social care <span class="filter-count text-small">1</span></label> </li> </ul> <h3> By date <a class="link-help" title="Information about how long we keep enforcement activity on the website" href="/action-weve-taken/retention-period-for-undertakings-enforcement-notices-and-civil-monetary-penalties/"> <span class="invisible">Information about how long we keep enforcement activity on the website</span> <span class="icon-question-circle"></span> </a> </h3> <ul class="form-checkbox-list"> <li> <input type="radio" name="facet_date" id="checkbox-date-all" value="" checked=""> <label for="checkbox-date-all">All</label> </li> <li> <input type="radio" name="facet_date" id="checkbox-date-last_month" value="last_month" > <label for="checkbox-date-last_month">Last month <span class="filter-count text-small">0</span></label> </li> <li> <input type="radio" name="facet_date" id="checkbox-date-last_year" value="last_year" > <label for="checkbox-date-last_year">Last year <span class="filter-count text-small">52</span></label> </li> <li> <label for="checkbox-date-custom" class="invisible">Date range</label> <input type="radio" name="facet_date" id="checkbox-date-custom" value="custom" > <label for="from">From </label> <span class="toc-input"> <input type="text" id="from" name="date_from" placeholder="dd/mm/yyyy"> </span> </li> <li> <label for="to">To</label> <span class="toc-input"> <input type="text" id="to" name="date_to" placeholder="dd/mm/yyyy"> </span> <button class="button button-right">Show <span class="icon-arrow-right"></span></button> </li> </ul> </fieldset> </form> </aside> </div> <div class="maincolumn column column-8 column-indent-1"> <div class="resultsort clearfix"> <p class="h4">170 in total</p> </div> <div class="resultlist"> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/southend-on-sea-city-council/" class="itemlink-content"> <h2 class="h3">Southend-on-Sea City Council</h2> <p class="text-small">17 October 2024, Reprimands, Local government</p> <p class="itemlink-description"> We issued a reprimand to Southend-on-Sea City Council in Essex after hidden data on a spreadsheet released as part of a freedom of information request revealed the sensitive personal details of staff </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/quick-tax-claims-limited-en/" class="itemlink-content"> <h2 class="h3">Quick Tax Claims Limited</h2> <p class="text-small">15 October 2024, Enforcement notices</p> <p class="itemlink-description"> An ICO investigation revealed that Quick Tax Claims Limited had sent 7,863,547 unlawful text messages over the course of a month, resulting in 66,793 complaints – 93% of these stating there was no ‘opt out’ option. During the investigation, the ICO found that the company had purchased personal information from third-party suppliers that did not obtain valid consent. This led to the ICO issuing Quick Tax Claims Limited with a £120,000 fine. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/quick-tax-claims-limited-mpn/" class="itemlink-content"> <h2 class="h3">Quick Tax Claims Limited</h2> <p class="text-small">15 October 2024, Monetary penalties</p> <p class="itemlink-description"> An ICO investigation revealed that Quick Tax Claims Limited had sent 7,863,547 unlawful text messages over the course of a month, resulting in 66,793 complaints – 93% of these stating there was no ‘opt out’ option. During the investigation, the ICO found that the company had purchased personal information from third-party suppliers that did not obtain valid consent. This led to the ICO issuing Quick Tax Claims Limited with a £120,000 fine. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/national-debt-advice-limited-en/" class="itemlink-content"> <h2 class="h3">National Debt Advice Limited</h2> <p class="text-small">14 October 2024, Enforcement notices, Finance insurance and credit</p> <p class="itemlink-description"> National Debt Advice sent 129,902 unsolicited direct marketing text messages to individuals in breach of regulation 22 of PECR resulting in over 4,000 complaints to the 7726 spam reporting service. The company was fined £30,000 and issued with an enforcement notice. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/national-debt-advice-limited-mpn/" class="itemlink-content"> <h2 class="h3">National Debt Advice Limited</h2> <p class="text-small">14 October 2024, Monetary penalties, Finance insurance and credit</p> <p class="itemlink-description"> National Debt Advice sent 129,902 unsolicited direct marketing text messages to individuals in breach of regulation 22 of PECR resulting in over 4,000 complaints to the 7726 spam reporting service. The company was fined £30,000 and issued with an enforcement notice. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/levales-solicitors-llp/" class="itemlink-content"> <h2 class="h3">Levales Solicitors LLP</h2> <p class="text-small">11 October 2024, Reprimands, Legal</p> <p class="itemlink-description"> Reprimand issued to Levales Solicitors LLP (‘Levales’) in respect of Articles 32(1)(b) and 32(1)(d). A threat actor accessed Levales’ cloud-based server using legitimate credentials and subsequently published data on the dark web. The incident affected 8,234 UK individuals, of which 863 individuals were deemed at high risk because of the nature of the data involved. The investigation found Levales were not ensuring the ongoing confidentiality of its processing systems and did not implement appropriate organisational measures. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/werepairuk-ltd-enforcement-notice/" class="itemlink-content"> <h2 class="h3">WerepairUK Ltd</h2> <p class="text-small">10 October 2024, Enforcement notices, Marketing</p> <p class="itemlink-description"> WerepairUK Ltd made 42,688 marketing calls to individuals in breach of regulation 21 of PECR. The company has been fined £80,000 and issued with an enforcement notice. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/werepairuk-ltd-mpn/" class="itemlink-content"> <h2 class="h3">WerepairUK Ltd</h2> <p class="text-small">10 October 2024, Monetary penalties, Marketing</p> <p class="itemlink-description"> WerepairUK Ltd made 42,688 marketing calls to individuals in breach of regulation 21 of PECR. The company has been fined £80,000 and issued with an enforcement notice. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/service-box-group-limited-mpn/" class="itemlink-content"> <h2 class="h3">Service Box Group Limited</h2> <p class="text-small">10 October 2024, Monetary penalties, Marketing</p> <p class="itemlink-description"> Service Box Group Limited made 5,361 marketing calls to individuals in breach of regulation 21 of PECR. The company has been fined £40,000 and issued with an enforcement notice. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/service-box-group-limited-en/" class="itemlink-content"> <h2 class="h3">Service Box Group Limited</h2> <p class="text-small">10 October 2024, Enforcement notices</p> <p class="itemlink-description"> Service Box Group Limited made 5,361 marketing calls to individuals in breach of regulation 21 of PECR. The company has been fined £40,000 and issued with an enforcement notice. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/police-service-of-northern-ireland-mpn/" class="itemlink-content"> <h2 class="h3">Police Service of Northern Ireland </h2> <p class="text-small">03 October 2024, Monetary penalties</p> <p class="itemlink-description"> The Police Service of Northern Ireland has been fined £750,000 for infringing Articles 5(1)(f), 32(1) and (2) of the UK GDPR between 25 May 2018 and 14 June 2024. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/bonne-terre-limited/" class="itemlink-content"> <h2 class="h3">Bonne Terre Limited t/a Sky Betting and Gaming</h2> <p class="text-small">17 September 2024, Reprimands, Online technology and telecoms</p> <p class="itemlink-description"> We issued a reprimand to Bonne Terre Limited, trading as Sky Betting and Gaming, for unlawfully processing people’s data through advertising cookies without their consent. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/the-labour-party/" class="itemlink-content"> <h2 class="h3">The Labour Party</h2> <p class="text-small">28 August 2024, Reprimands, Political</p> <p class="itemlink-description"> The Labour Party were issued with a reprimand for failing to respond to people’s request for their own personal data, also know as a subject access request, and for failing to respond to peoples request for erasure. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/coastal-windows-conservatories-uk-limited/" class="itemlink-content"> <h2 class="h3">Coastal Windows & Conservatories (UK) Limited</h2> <p class="text-small">15 August 2024, Enforcement notices, Retail and manufacture</p> <p class="itemlink-description"> Coastal Windows & Conservatories Limited made over 18,000 unsolicited marketing calls between 1 January and 1 June 2023 to numbers registered with the TPS. The ICO and TPS received numerous complaints from people variously saying they had not consented to receiving such calls or received repeated calls despite requests to stop. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/coastal-windows-conservatories-uk-limited-1/" class="itemlink-content"> <h2 class="h3">Coastal Windows & Conservatories (UK) Limited</h2> <p class="text-small">15 August 2024, Monetary penalties, Retail and manufacture</p> <p class="itemlink-description"> Coastal Windows & Conservatories Limited made over 18,000 unsolicited marketing calls between 1 January and 1 June 2023 to numbers registered with the TPS. The ICO and TPS received numerous complaints from people variously saying they had not consented to receiving such calls or received repeated calls despite requests to stop. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/the-electoral-commission/" class="itemlink-content"> <h2 class="h3">The Electoral Commission</h2> <p class="text-small">30 July 2024, Reprimands, Central government</p> <p class="itemlink-description"> Reprimand issued to the Electoral Commission in respect of Articles 5(1)(f) and 32(1)(b). Between 24 August 2021 and 27 October 2022, a threat actor had access to the Electoral Commission’s systems and was able to access personal data held as part of the Electoral Register. This incident impacted approximately 40,000,000 individuals, and the initial access was gained via several unpatched software vulnerabilities. The investigation highlighted that appropriate technical and organisational measures were not in place at the time of the breach. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/chelmer-valley-high-school/" class="itemlink-content"> <h2 class="h3">Chelmer Valley High School</h2> <p class="text-small">22 July 2024, Reprimands, Education and childcare</p> <p class="itemlink-description"> Chelmer Valley High School have been issued a reprimand in respect of Article 35(1). The school failed to complete a Data Protection Impact Assessment (DPIA) prior to introducing facial recognition technology for the purposes of cashless catering. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/london-borough-of-hackney-1/" class="itemlink-content"> <h2 class="h3">London Borough of Hackney</h2> <p class="text-small">05 July 2024, Reprimands, Local government</p> <p class="itemlink-description"> The Information Commissioner’s Office has issued the London Borough of Hackey with a reprimand following a cyber-attack in 2020 that led to hackers gaining access to and encrypting 440,000 files, affecting at least 280,000 residents and other individuals including staff. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/birmingham-childrens-trust-community-interest-company/" class="itemlink-content"> <h2 class="h3">Birmingham Children's Trust Community Interest Company</h2> <p class="text-small">14 May 2024, Reprimands</p> <p class="itemlink-description"> Reprimand issued to Birmingham Children’s Trust Community Interest company in respect of Article 5(1)(f) and 32(1)(b) and 2. A child protection plan containing inappropriate personal data, in the form of criminal allegations against a child, was sent to the family the plan was produced for. Although the care plan itself was authorised for the family to view, the criminal allegations were not relevant to the plan, or authorised for the family’s view. The investigation highlighted that appropriate technical and organisational measures were not in place at the time of the breach. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/the-central-young-men-s-christian-association-reprimand/" class="itemlink-content"> <h2 class="h3">The Central Young Men’s Christian Association</h2> <p class="text-small">30 April 2024, Reprimands, Charitable and voluntary</p> <p class="itemlink-description"> The Central YMCA sent an email to individuals participating in a programme for people living with HIV using “CC” rather than “BCC”, revealing the email addresses to all recipients. 166 individuals could be identified or potentially identified from their email address. As a result, it could be inferred that these individuals were likely to be living with HIV. The Central YMCA have been fined £7,500 and issued a reprimand. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/the-central-young-men-s-christian-association-mpn/" class="itemlink-content"> <h2 class="h3">The Central Young Men’s Christian Association</h2> <p class="text-small">30 April 2024, Monetary penalties, Charitable and voluntary</p> <p class="itemlink-description"> The Central YMCA sent an email to individuals participating in a programme for people living with HIV using “CC” rather than “BCC”, revealing the email addresses to all recipients. 166 individuals could be identified or potentially identified from their email address. As a result, it could be inferred that these individuals were likely to be living with HIV. The Central YMCA have been fined £7,500 and issued a reprimand. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/outsource-strategies-ltd-en/" class="itemlink-content"> <h2 class="h3">Outsource Strategies Ltd</h2> <p class="text-small">24 April 2024, Enforcement notices, Marketing</p> <p class="itemlink-description"> Outsource Strategies Ltd made 1,346,503 unwanted marketing calls between 11 February 2021 and 22 March 2022 to numbers registered with the TPS. The ICO received 74 complaints from people variously saying they received repeated calls despite requests to stop and that the callers were aggressive. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/outsource-strategies-ltd-mpn/" class="itemlink-content"> <h2 class="h3">Outsource Strategies Ltd</h2> <p class="text-small">23 April 2024, Monetary penalties</p> <p class="itemlink-description"> Outsource Strategies Ltd made 1,346,503 unwanted marketing calls between 11 February 2021 and 22 March 2022 to numbers registered with the TPS. The ICO received 74 complaints from people variously saying they received repeated calls despite requests to stop and that the callers were aggressive. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/dr-telemarketing-monetary-penalty-notice/" class="itemlink-content"> <h2 class="h3">Dr Telemarketing</h2> <p class="text-small">23 April 2024, Monetary penalties</p> <p class="itemlink-description"> Between 11 February 2021 to 24 January 2022, there were 80,240 connected calls unsolicited direct marketing calls being made to subscribers who were registered with the TPS and who had not notified DRT that they were willing to receive such calls, and two complaints being submitted as a result. Calls were about the Irish Lottery. DRT stopped engaging with the Commissioner part way through the investigation and failed to provide a satisfactory explanation for the Lotto Express calls involved in the contravention. </p> </a> </div> <div class="itemlink theme-action clearfix"> <a href="/action-weve-taken/enforcement/dr-telemarketing-enforcement-notice/" class="itemlink-content"> <h2 class="h3">Dr Telemarketing</h2> <p class="text-small">23 April 2024, Enforcement notices</p> <p class="itemlink-description"> Between 11 February 2021 to 24 January 2022, there were 80,240 connected calls unsolicited direct marketing calls being made to subscribers who were registered with the TPS and who had not notified DRT that they were willing to receive such calls, and two complaints being submitted as a result. Calls were about the Irish Lottery. DRT stopped engaging with the Commissioner part way through the investigation and failed to provide a satisfactory explanation for the Lotto Express calls involved in the contravention. </p> </a> </div> </div> <div class="itemlink-loading clearfix" style="display: none"> <span class="icon-spinner animate-spin"></span> Loading results </div> <nav class="article-navigation" aria-label="article more"> <a href="/action-weve-taken/enforcement?rows=50" data-url="/action-weve-taken/enforcement/FilterPageResults?start=25" class="button button-top">More</a> </nav> </div> </div> </article> </main> <footer> <div class="footer-sociallinks container row"> <div class="footer-sociallinks-links footer-sociallinks-links--left column column-2"> <ul class=""> <li> <a href="#" class="button-circle" id="toggle-hiddenpanel-share"> <span class="icon-share"></span> <span class="invisible">Share this page</span> </a> </li> <li> <a href="javascript:window.print()" class="button-circle" data-item="Print"> <span class="icon-print"></span> <span class="invisible">Print this page</span> </a> </li> <li> <a href="/global/rss-feeds/" class="button-circle" data-item="RSS"> <span class="icon-feed"></span> <span class="invisible">RSS feeds</span> </a> </li> </ul> </div> <div class="footer-sociallinks-language column column-2 language-dropdown-container"> <div class="language-dropdown-tab-controls dropdown"> <a href="#" class="visible-xs mobile-tabcontrol" title="Language Selector" aria-haspopup="true" aria-expanded="false" data-target="[langSelector__nav]"> <ul class="globe-list"> <li class="button-circle globe" title="Language"> <span class="icon-globe"></span></li> </ul> <span class="dropdown-label">English</span> <span class="chevron down"></span> </a> <ul class="nav nav-tabs" data-name="langSelector__nav"> <li class="tab active"> <a rel="nofollow" href="https://ico.org.uk" name="English" class="content language-item">English</a> </li> <li class="tab"> <a rel="nofollow" href="https://cy.ico.org.uk" name="Welsh" class="content language-item">Cymraeg</a> </li> </ul> </div> </div> <div class="footer-sociallinks-links footer-sociallinks-links--right column column-4"> <ul class="clearfix"> <li> <a href="https://twitter.com/iconews" target="_blank" class="button-circle" data-item="Follow us on Twitter"> <span class="icon-twitter"></span> <span class="invisible">Follow us on Twitter</span> </a> </li> <li> <a href="http://facebook.com/ICOnews" target="_blank" class="button-circle" data-item="Like us on Facebook"> <span class="icon-facebook"></span> <span class="invisible">Like us on Facebook</span> </a> </li> <li> <a href="http://linkedin.com/company/information-commissioner's-office" target="_blank" class="button-circle" data-item="Connect with us on Linkedin"> <span class="icon-linkedin"></span> <span class="invisible">Connect with us on Linkedin</span> </a> </li> <li> <a href="http://www.youtube.com/user/icocomms" target="_blank" class="button-circle" data-item="Watch us on YouTube"> <span class="icon-youtube"></span> <span class="invisible">Watch us on YouTube</span> </a> </li> </ul> </div> <div class="hiddenpanel clearfix" id="hiddenpanel-share"> <h2 class="h4">Share this page</h2> <ul class="clearfix"> <li> <a href="http://www.reddit.com/submit?url=https:%2f%2fico.org.uk%2f" target="_blank" class="button-circle"> <span class="icon-reddit"></span> <span class="invisible">Share via Reddit</span> </a> </li> <li> <a href="https://www.linkedin.com/shareArticle?mini=true&title=Information+Commissioner's+Office+(ICO)&url=https:%2f%2fico.org.uk%2f&source=Ico.org.uk" target="_blank" class="button-circle"> <span class="icon-linkedin"></span> <span class="invisible">Share via LinkedIn</span> </a> </li> <li> <a href="/cdn-cgi/l/email-protection#d2edb0bdb6abefbaa6a6a2a1e8f7e0b4f7e0b4bbb1bdfcbda0b5fca7b9f7e0b4" target="_blank" class="button-circle"> <span class="icon-envelope"></span> <span class="invisible">Share via email</span> </a> </li> </ul> </div> <a href="/about-the-ico/media-centre/e-newsletter/" class="footer-sociallinks-newsletter"> <span class="h4">Subscribe to our e-newsletter</span> <span class="button-circle"> <span class="icon-envelope"></span> </span> </a> <div class="footer-sociallinks-language--mobile language-dropdown-container"> <div class="language-dropdown-tab-controls dropdown"> <a href="#" class="visible-xs mobile-tabcontrol" title="Language Selector" aria-haspopup="true" aria-expanded="false" data-target="[langSelector__nav--mobile]"> <ul class="globe-list"> <li class="button-circle globe" title="Language"><span class="icon-globe"></span></li> </ul> <span class="dropdown-label">English</span> <span class="chevron down"></span> </a> <ul class="nav nav-tabs" data-name="langSelector__nav--mobile"> <li class="tab active"> <a rel="nofollow" href="https://ico.org.uk" name="English" class="content language-item">English</a> </li> <li class="tab"> <a rel="nofollow" href="https://cy.ico.org.uk" name="Welsh" class="content language-item">Cymraeg</a> </li> </ul> </div> </div> </div> <div class="container-sitemap"> <div class="container row"> <div class="column column-2"> <a href="/" class="footer-sitemap-logo"><span class="invisible">ICO: Information Commissioner's Office</span></a> </div> <div class="column column-2"> <h2 class="h4"><a href="/for-the-public/">Your data matters</a></h2> <ul class="text-small"> <li><a href="/for-the-public/official-information/">Official information</a></li> <li><a href="/for-the-public/nuisance-calls/">Nuisance calls</a></li> </ul> </div> <div class="column column-2"> <h2 class="h4"><a href="/for-organisations/">For organisations</a></h2> <ul class="text-small"> <li><a href="/for-organisations/uk-gdpr-guidance-and-resources/">UK GDPR guidance and resources</a></li> <li><a href="/for-organisations/foi/">Freedom of information</a></li> <li><a href="/for-organisations/eir-and-access-to-information/">EIR and access to information</a></li> <li><a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/">Direct marketing</a></li> <li><a href="/for-organisations/advice-and-services/">Advice and services</a></li> </ul> </div> <div class="column column-2"> <h2 class="h4"><a href="/action-weve-taken/">Action we've taken</a></h2> <ul class="text-small"> <li><a href="/action-weve-taken/enforcement/">Enforcement action</a></li> <li><a href="https://icosearch.ico.org.uk/s/search.html?collection=ico-meta&profile=decisions&query">Decision notices</a></li> <li><a href="/action-weve-taken/audits-and-overview-reports/">Audits</a></li> </ul> </div> <div class="column column-2"> <h2 class="h4"><a href="/about-the-ico/">About the ICO</a></h2> <ul class="text-small"> <li><a href="/about-the-ico/who-we-are/">Who we are</a></li> <li><a href="/about-the-ico/what-we-do/">What we do</a></li> <li><a href="/about-the-ico/media-centre/">Media centre</a></li> <li><a href="/about-the-ico/jobs/">Careers</a></li> <li><a href="/about-the-ico/modern-slavery-statement/">Modern Slavery Statement</a></li> </ul> </div> </div> </div> <div class="container-strapline"> <div class="container row"> <div class="column column-12 h4"> <p>The ICO exists to empower you through information.</p> </div> </div> </div> <div class="container-footerlinks"> <div class="container row"> <div class="column column-12"> <nav aria-label="footer" class="clearfix"> <a href="/global/contact-us/">Contact us</a> <a href="/global/privacy-notice/">Privacy notice</a> <a href="/global/cookies/">Cookies</a> <a href="/global/accessibility/">Accessibility</a> <a href="https://ico.org.uk/about-the-ico/who-we-are/wales-office">Cymraeg</a> <a href="/global/request-publications/">Publications</a> <a href="/global/disclaimer/">Disclaimer</a> <a href="/global/copyright-and-re-use-of-materials/">© Copyright</a> </nav> <div class="footerlinks-phone h2"><span class="icon-phone"></span><span class="invisible">Phone:</span> 0303 123 1113</div> <div class="footer-ogl"><span class="invisible">Open Government Licence</span></div> <div class="text-small footer-ogl-info"> All text content is available under the <a href="http://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/">Open Government Licence v3.0</a>, except where otherwise stated. </div> </div> </div> </div> </footer> <script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script><script type="application/json" id="CookieControlConfig"> {"apiKey":"dbf86e044f3ab8c4df852af5c7c6ceb2dd7678dd","product":"PRO","theme":"dark","position":"left","rejectButton":true,"closeStyle":"button","consentCookieExpiry":90,"initialState":"open","statement":{"description":"For more detailed information, see our","name":"Cookies page.","url":"/global/cookies/","updated":"23/05/2024"},"text":{"notifyTitle":"Cookies on the ICO website","notifyDescription":"We use some essential cookies to make this site work. We'd like to set analytics cookies to understand how you use this site. We may use services from Vimeo and YouTube that may also use cookies.","accept":"Accept non-essential cookies","reject":"Reject non-essential cookies","settings":"Settings","necessaryTitle":"Essential cookies","necessaryDescription":"These cookies are necessary for core functionality, such as security and network management. They always need to be on.","title":"Cookies on the ICO website","intro":"We use some essential cookies to make this site work. We'd like to set analytics cookies to understand how you use this site. We may use services from Vimeo and YouTube that may also use cookies.","acceptRecommended":"Accept non-essential cookies","rejectSettings":"Reject non-essential cookies","closeLabel":"Save and close"},"branding":{"fontFamily":"Verdana, Helvetica, Arial, sans-serif","fontColor":"#FFF","fontSizeTitle":"25px","fontSizeIntro":"15px","fontSizeHeaders":"21px","fontSize":"15px","acceptBackground":"#FFF","backgroundColor":"#0276A5","toggleText":"#FFF","toggleColor":"#0276A5","toggleBackground":"#2F2F5F","removeAbout":true},"necessaryCookies":["rwe*","language","UMB_*","UMB-*","XSRF-*","__RequestVerificationToken"],"optionalCookies":[{"name":"analytics","label":"Analytics cookies","description":"We use Silktide to measure how you use the ICO website. \n\nThese cookies collect information about how you got to the site, the pages you visit and how long you spend on each page, and what you click on.","cookies":[],"lawfulBasis":"Consent","recommendedState":true,"onAccept":"ICO.Silktide.enable(\"12d0c703744ea255b679f823daf1645f\");","onRevoke":"ICO.Silktide.disable();"},{"name":"video","label":"Video player cookies","description":"We use services from Vimeo and YouTube to show you embedded videos on the ICO website.\n\nVimeo and Google may use cookies to receive information about the videos you watch for analytics and advertising purposes.","cookies":[],"lawfulBasis":"Consent","recommendedState":true,"onAccept":"activateEmbeddedVideos();","onRevoke":"deactivateEmbeddedVideos();"}]} </script> <script src="/cassette.axd/script/9d04de21d8a78bf0c13d1fc48c6564b1496c7b6e/scripts" type="text/javascript"></script>  </body> </html>

CINXE.COM

Enforcement action | ICO