Search

How can we help?

Icon

ICO Fines – Don’t fall foul of the rules

Back in March, Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.  This used to be the largest fine that the ICO could impose under the Data Protection Act 1998 but the Data Protection Act 2018 now allows for a fine of anywhere up to 20 million euros or 4% of annual worldwide turnover, whichever is greater.

There have also been a number of fines imposed over recent months for unsolicited marketing emails and calls including two this month, namely:

  • £100,000 fine for Koypo Laboratories Limited for instigating 21,166,574 unsolicited marketing emails without consent
  • £80,000 fine for Rain Trading Limited for making 270,774 unsolicited marketing  calls to individuals without consent

Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.

In the current economic crisis it would not be surprising if more businesses turned their attention to marketing but these fines are a stark warning to organisations to ensure they comply with data protection obligations in doing so.

Please do not hesitate to get in contact with our data protection team if you have any questions.

Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Author profile

About this article

Read, listen and watch our latest insights

art
  • 19 August 2026
  • Employment

Managing employee redundancies: Frequently asked questions (FAQs)

Redundancy should be an employer’s last option when restructuring their business. There are necessary steps that should be taken to ensure that redundancy is the best move forward

art
  • 18 August 2026
  • Immigration

Home Office curtailment of Sponsored Workers’ permission: Why employers and employees must act quickly

The Home Office has recently changed the speed at which it processes sponsor notifications following the end of a sponsored worker’s employment.

art
  • 13 August 2026
  • Employment

ACAS Draft New Code on Disciplinary and Grievance Procedures

ACAS have published a draft Code on 30 July 2026, which will replace the 2015 ACAS Code on disciplinary and grievance procedures when the Code is finalised at the end of September 2026.

art
  • 12 August 2026
  • Corporate and M&A

EMIs – April 2026 changes explained

On 6 April 2026 the Enterprise Management Incentive scheme (EMI) was expanded to make EMIs accessible to a wider range of businesses.

art
  • 06 August 2026
  • Privacy and Data Protection

The rise of the AI-powered individual: Is your business ready?

Artificial intelligence is changing the data protection landscape, but perhaps not in the way many organisations expected. Much of the discussion has centred on businesses adopting AI and ensuring they comply with the UK GDPR.

Pub
  • 06 August 2026
  • Employment

Employment law changes in 2026: What you need to know

With ongoing changes to UK employment law, staying updated is more challenging than ever. Join Monica Atwal and Harry Berryman for a live webinar covering 2026 HR changes and key employment law updates on Thursday 17 September.