Search

How can we help?

Icon

ICO Fines – Don’t fall foul of the rules

Back in March, Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.  This used to be the largest fine that the ICO could impose under the Data Protection Act 1998 but the Data Protection Act 2018 now allows for a fine of anywhere up to 20 million euros or 4% of annual worldwide turnover, whichever is greater.

There have also been a number of fines imposed over recent months for unsolicited marketing emails and calls including two this month, namely:

  • £100,000 fine for Koypo Laboratories Limited for instigating 21,166,574 unsolicited marketing emails without consent
  • £80,000 fine for Rain Trading Limited for making 270,774 unsolicited marketing  calls to individuals without consent

Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.

In the current economic crisis it would not be surprising if more businesses turned their attention to marketing but these fines are a stark warning to organisations to ensure they comply with data protection obligations in doing so.

Please do not hesitate to get in contact with our data protection team if you have any questions.

Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Author profile

About this article

Read, listen and watch our latest insights

art
  • 02 April 2026
  • Commercial Real Estate

Can I have access to a neighbour’s land to carry out works to my property?

As a landowner, maintaining and repairing your property is important. It may be the case that to do so, you will need to access the land of a neighbour.

art
  • 01 April 2026
  • Privacy and Data Protection

Recognising DSARs: top tips for organisations

The UK GDPR grants Data Subjects, who are the individuals to whom the personal data relates, rights over their personal data, including the rights of access, correction and erasure.

art
  • 30 March 2026
  • Employment

Legislative Changes – What Employers Need to Know for April 2026

With the phased implementation of the Employment Rights Act 2025 (ERA), alongside other legislative updates, April 2026 brings a wide range of important changes for employers.

Pub
  • 27 March 2026
  • Corporate and M&A

Shareholder Disputes: What to do when disputes arise – Episode 4

Join Stuart Mullins and Jack Hobbs for episode four of our Shareholder Disputes podcast series as they confront the realities of shareholder fallouts and share practical strategies for managing these complex situations.

art
  • 24 March 2026
  • Immigration

Spouse Visa – Is your relationship genuine and subsisting?

For years many couples have become frustrated by the requirements for a spouse visa as the rules and guidance are difficult to understand. A significant amount of applications are rejected on the basis of the applicant not providing the adequate documents to evidence the relationship requirement.

art
  • 20 March 2026
  • Corporate and M&A

Drag-Along & Tag-Along Rights: Why Every Company Needs Them

When starting a company, very few founders are aware of the potential issues around shares, share ownership and the implications of that when selling their company.