Search

How can we help?

Icon

ICO Fines – Don’t fall foul of the rules

Back in March, Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.  This used to be the largest fine that the ICO could impose under the Data Protection Act 1998 but the Data Protection Act 2018 now allows for a fine of anywhere up to 20 million euros or 4% of annual worldwide turnover, whichever is greater.

There have also been a number of fines imposed over recent months for unsolicited marketing emails and calls including two this month, namely:

  • £100,000 fine for Koypo Laboratories Limited for instigating 21,166,574 unsolicited marketing emails without consent
  • £80,000 fine for Rain Trading Limited for making 270,774 unsolicited marketing  calls to individuals without consent

Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.

In the current economic crisis it would not be surprising if more businesses turned their attention to marketing but these fines are a stark warning to organisations to ensure they comply with data protection obligations in doing so.

Please do not hesitate to get in contact with our data protection team if you have any questions.

Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Author profile

About this article

Read, listen and watch our latest insights

art
  • 21 January 2026
  • Privacy and Data Protection

FAQs – Data Subject Access Requests

Any individual who may be identified from any form of document, whether directly or indirectly, is a data subject.

art
  • 20 January 2026
  • Corporate and M&A

Positioning Your Business for Growth and Exit in 2026

2025 proved another challenging year for SMEs in the UK, with regulatory reform for Companies, increased taxes and operating costs and geopolitical pressure making for a harsh trading environment, Yet, despite the gloomy economic outlook, dealmaking in the region remained robust.

Pub
  • 20 January 2026
  • Immigration

UK Immigration: What to expect in 2026 for employers

Join our UK immigration specialists, Ruth Karimatsenga and Monica Mastropasqua, for an on-demand webinar as they discuss the key updates and their impact on your business in 2026.

Pub
  • 15 January 2026
  • Corporate and M&A

Quarterly Insights: Key Corporate & Commercial Topics – Q1 2026

Join Stuart Mullins and Jonathan Hayes as they explore the most topical issues and key developments our team has examined over the past three months. In Episode 1, they discuss Family Investment Companies, Legal Due Diligence, and Directors’ Duties.

Pub
  • 08 January 2026
  • Privacy and Data Protection

Data Protection Audits: Launch Event

Join us for a breakfast networking session on Thursday 26th February 2026 as we officially launch our Data Protection Audit services.

art
  • 08 January 2026
  • Privacy and Data Protection

Data Protection – what’s happened in 2025?

2025 has been a lively year for the data protection sphere, with the main talking point coming from the UK’s data reform Bill finally receiving Royal Assent on 19 June 2025.