Search

How can we help?

Icon

ICO Fines – Don’t fall foul of the rules

Back in March, Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.  This used to be the largest fine that the ICO could impose under the Data Protection Act 1998 but the Data Protection Act 2018 now allows for a fine of anywhere up to 20 million euros or 4% of annual worldwide turnover, whichever is greater.

There have also been a number of fines imposed over recent months for unsolicited marketing emails and calls including two this month, namely:

  • £100,000 fine for Koypo Laboratories Limited for instigating 21,166,574 unsolicited marketing emails without consent
  • £80,000 fine for Rain Trading Limited for making 270,774 unsolicited marketing  calls to individuals without consent

Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.

In the current economic crisis it would not be surprising if more businesses turned their attention to marketing but these fines are a stark warning to organisations to ensure they comply with data protection obligations in doing so.

Please do not hesitate to get in contact with our data protection team if you have any questions.

Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Author profile

About this article

Read, listen and watch our latest insights

Pub
  • 04 December 2025
  • Immigration

UK Immigration: What to expect in 2026 for employers

Join our UK immigration specialists, Ruth Karimatsenga and Monica Mastropasqua, as they explore the key updates and how they affect your business in 2026.

Pub
  • 04 December 2025
  • Corporate and M&A

Autumn Budget 2025 Breakdown: Key takeaways for business buyers and sellers

Join Stuart Mullins and Nicky Goringe Larkin as they delve into the key updates from the Chancellor’s announcement, with a focus on what matters most for businesses looking to buy and sell.

art
  • 03 December 2025
  • Corporate and M&A

Why is carrying out a legal Due Diligence investigation necessary during an proposed acquisition?

Merging with or acquiring another company is a high-stakes endeavour. The purpose, process and common areas of investigation during a M&A transaction.

art
  • 02 December 2025
  • Employment

All I Want for Christmas… Is No Tribunal Claims!

Before the festivities begin, it is worth unwrapping the key risks and understanding how employers can protect their staff, their reputation and their sanity, while still delivering a thoroughly enjoyable evening.

art
  • 01 December 2025
  • Immigration

Government consultation on extending settlement requirements: What employers and migrants need to know

This article summarises the key proposals , groups who will and will not be affected by the extending settlement requirements, and the potential impact for employers, workers and families.

art
  • 28 November 2025
  • Commercial Real Estate

Auction Sales: Key Things to Consider

Buying or selling a property at auction can offer both buyers and sellers unique advantages, but it also comes with potential risks.