Search

How can we help?

Icon

ICO Fines – Don’t fall foul of the rules

Back in March, Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.  This used to be the largest fine that the ICO could impose under the Data Protection Act 1998 but the Data Protection Act 2018 now allows for a fine of anywhere up to 20 million euros or 4% of annual worldwide turnover, whichever is greater.

There have also been a number of fines imposed over recent months for unsolicited marketing emails and calls including two this month, namely:

  • £100,000 fine for Koypo Laboratories Limited for instigating 21,166,574 unsolicited marketing emails without consent
  • £80,000 fine for Rain Trading Limited for making 270,774 unsolicited marketing  calls to individuals without consent

Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.

In the current economic crisis it would not be surprising if more businesses turned their attention to marketing but these fines are a stark warning to organisations to ensure they comply with data protection obligations in doing so.

Please do not hesitate to get in contact with our data protection team if you have any questions.

Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Author profile

About this article

Read, listen and watch our latest insights

art
  • 11 June 2026
  • Immigration

MAC report reveals who stays in the UK on the Skilled Worker Route – Key insights for employers

Key insights from the MAC report: Who stays in the UK on the Skilled Worker route? Essential findings and takeaways for employers.

art
  • 08 June 2026
  • Privacy and Data Protection

FAQs – Privacy Documentation

Clearly documenting and regularly reviewing data protection policies and procedures is paramount to demonstrating compliance with the UK GDPR. It is essential that such policies are communicated within an entity and staff are regularly trained on these.

art
  • 03 June 2026
  • Employment

Holiday Pay Record Keeping – What this new duty means for employers

The Employment Rights Act 2025 made certain changes to the rules around holiday records, which came into effect on 6th April 2026.

art
  • 03 June 2026
  • Corporate and M&A

Is your Company’s Register of Members accurate? The hidden risks of getting it wrong

Ensure your company’s Register of Members is accurate and compliant. Learn the legal risks, common mistakes, and how to protect your business from penalties.

art
  • 02 June 2026
  • Corporate and M&A

Clarkslegal welcomes leading Corporate Law expert Mark Ridley as Partner

Clarkslegal is delighted to announce the appointment of Mark Ridley as a new Partner in the Corporate and Commercial team.

art
  • 28 May 2026

Newly rebranded legal services group Orwins makes investment in Clarkslegal

Orwins, the law firm for ambitious businesses and high net worth individuals, has today, 27 May 2026, announced a significant investment in Reading-based commercial law firm Clarkslegal.