Search

How can we help?

Icon

ICO Fines – Don’t fall foul of the rules

Back in March, Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.  This used to be the largest fine that the ICO could impose under the Data Protection Act 1998 but the Data Protection Act 2018 now allows for a fine of anywhere up to 20 million euros or 4% of annual worldwide turnover, whichever is greater.

There have also been a number of fines imposed over recent months for unsolicited marketing emails and calls including two this month, namely:

  • £100,000 fine for Koypo Laboratories Limited for instigating 21,166,574 unsolicited marketing emails without consent
  • £80,000 fine for Rain Trading Limited for making 270,774 unsolicited marketing  calls to individuals without consent

Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.

In the current economic crisis it would not be surprising if more businesses turned their attention to marketing but these fines are a stark warning to organisations to ensure they comply with data protection obligations in doing so.

Please do not hesitate to get in contact with our data protection team if you have any questions.

Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Author profile

About this article

Read, listen and watch our latest insights

Pub
  • 27 April 2026
  • Corporate and M&A

Quarterly Insights: Key Corporate & Commercial Topics – Q2 2026

Join Stuart Mullins and Emma Docking as they explore key corporate and commercial topics, including SME growth and exit strategies for 2026, EMI schemes for employee incentives, and the importance of drag along and tag along rights.

art
  • 22 April 2026
  • Commercial Real Estate

Historic rent reviews: A warning for tenants

We have been asked whether a landlord is able to operate historic rent reviews. 

art
  • 14 April 2026
  • Employment

Updates to Vento Bands 2026: Injury to feelings awards

For discrimination and detriment cases, compensation can also cover non-financial losses, which, in most cases, will include an injury to feelings award.

art
  • 13 April 2026
  • Litigation and dispute resolution

Renters’ Rights Act coming into force on 1 May 2026

The long-awaited Renters’ Rights Act 2025 (RRA) comes into force on 1 May 2026, bringing the biggest changes to the private rental sector since the 1980s. So what do landlords need to know about what is changing?

art
  • 13 April 2026
  • Immigration

Sponsor Licence Compliance in 2026: Increased Scrutiny, Increased Risk – Time to Audit

The Home Office’s latest updates to sponsor guidance in March 2026, alongside broader immigration rule changes introduced this year, signal a decisive shift in the UK’s sponsorship regime.

art
  • 10 April 2026
  • Privacy and Data Protection

Is your tech discriminatory?

Employers are increasingly reliant on technology to assist with all kinds of functions – from strengthening security to streamlining recruitment processes.