Search

How can we help?

Icon

ICO Fines – Don’t fall foul of the rules

Back in March, Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.  This used to be the largest fine that the ICO could impose under the Data Protection Act 1998 but the Data Protection Act 2018 now allows for a fine of anywhere up to 20 million euros or 4% of annual worldwide turnover, whichever is greater.

There have also been a number of fines imposed over recent months for unsolicited marketing emails and calls including two this month, namely:

  • £100,000 fine for Koypo Laboratories Limited for instigating 21,166,574 unsolicited marketing emails without consent
  • £80,000 fine for Rain Trading Limited for making 270,774 unsolicited marketing  calls to individuals without consent

Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.

In the current economic crisis it would not be surprising if more businesses turned their attention to marketing but these fines are a stark warning to organisations to ensure they comply with data protection obligations in doing so.

Please do not hesitate to get in contact with our data protection team if you have any questions.

Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Author profile

About this article

Read, listen and watch our latest insights

art
  • 24 June 2026
  • Employment

What are employer’s obligations during a heatwave?

During the summer, employers can come across employee issues relating to the heat and hot weather. How can employers handle hot weather and what are employer obligations during a heatwave?

art
  • 23 June 2026
  • Employment

Pride month and employment law: Ensuring compliance with LGBTQ+ protections

With each Pride month, companies unveil rainbow logos and send office wide emails of solidarity. These gestures are valuable, giving visible demonstrations of support, but only really make a difference if those companies are able to truly say that their policies and practices are inclusive and legally compliant.

art
  • 22 June 2026
  • Commercial Real Estate

Do you need an EPC for lease renewals? Key insights for commercial property owners

When is an EPC required for leases? The non-domestic EPC guidance makes it clear that an EPC is not required on renewal. The Ministry for Housing, Communities and Local Government’s (MHCLG’s) “A guide to energy performance certificates for the construction, sale and let of non-dwellings: Improving the energy efficiency of our buildings”

Pub
  • 18 June 2026
  • Employment

Employment Rights Act 2025: Key Changes for Employers

Join Katie Glendinning and Lucy White for an on demand webinar as they break down the key changes introduced by the Employment Rights Act 2025, offering clear insights into what these reforms mean in practice for employers and HR professionals.

art
  • 18 June 2026
  • Corporate and M&A

Business sales and NDAs: Creating a safe space to open up your business

You have accepted an offer to sell your business, but taking an agreement in principle through to completion may involve the need to divulge your company’s private information – perhaps deep secrets which have given your business its competitive edge.  

art
  • 16 June 2026
  • Employment

Shaping the Future of Work: Insights from the 114th ILO International Labour Conference

Having recently returned from the 114th Session of the International Labour Conference in Geneva, I have been reflecting on the work of the International Labour Organisation (ILO) and the important role it plays in global standard setting, as well as promoting social and economic inclusivity.