Search

How can we help?

Icon

ICO Fines – Don’t fall foul of the rules

Back in March, Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.  This used to be the largest fine that the ICO could impose under the Data Protection Act 1998 but the Data Protection Act 2018 now allows for a fine of anywhere up to 20 million euros or 4% of annual worldwide turnover, whichever is greater.

There have also been a number of fines imposed over recent months for unsolicited marketing emails and calls including two this month, namely:

  • £100,000 fine for Koypo Laboratories Limited for instigating 21,166,574 unsolicited marketing emails without consent
  • £80,000 fine for Rain Trading Limited for making 270,774 unsolicited marketing  calls to individuals without consent

Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.

In the current economic crisis it would not be surprising if more businesses turned their attention to marketing but these fines are a stark warning to organisations to ensure they comply with data protection obligations in doing so.

Please do not hesitate to get in contact with our data protection team if you have any questions.

Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Author profile

About this article

Read, listen and watch our latest insights

art
  • 09 October 2026
  • Employment

Neurodiversity, probation and unfair dismissal: What employers need to know

The next few years are introducing landmark changes to employment law in the UK, under the Employment Rights Act 2025. Part of these changes include the amendments to rights to unfair dismissal, reducing the qualifying period for this right to six months.

art
  • 08 October 2026
  • Commercial Real Estate

Packing up rate mitigation – The end of ‘box shifting’?

What is box shifting and how does it affect property owners and tenants? We examine the Court of Appeal’s decision in City of London v 48th Street Holdings and its implications for intermittent occupation, business rates and lease arrangements.

art
  • 30 September 2026

Clarkslegal celebrates strong results in the Legal 500 UK 2027

Clarkslegal would like to thank its clients for the outstanding feedback that contributed to the firm’s recognition in the Legal 500 UK Solicitors 2027 Guide. We are proud to be recognised across five key practice areas: Litigation, Property, Corporate & Commercial, Employment, and Immigration.

art
  • 29 September 2026
  • Employment

New bereavement leave rights for pregnancy loss

The Government have announced that in April 2027 they will be introducing a new right to bereavement leave to include those who suffer pregnancy loss before 24 weeks. This has been announced in their response to their consultation on bereavement leave “Make Work Pay: Leave for bereavement including pregnancy loss”.

art
  • 25 September 2026
  • Employment

Consultation response on duty to inform workers of right to join a union

The Employment Rights Act 2025, makes it a requirement for employers to inform workers of their right to join a trade union at the same time as the Section 1 particulars are issued to them and at subsequent times. The details of this new duty are to be provided in regulations.

art
  • 24 September 2026
  • Public Procurement

Procurement challenges: What documents and information are bidders entitled to?

A tricky feature of public procurement challenges for unsuccessful bidders is that contracting authorities usually hold all the cards. When the outcome of a tender conducted under the Procurement Act 2023 has been decided, authorities must provide bidders with an Assessment Summary containing their scores for each of the award criteria and those of the successful bidder and an explanation for those scores.