Awdurdod annibynnol y Deyrnas Unedig a sefydlwyd i gynnal hawliau gwybodaeth er budd y cyhoedd, annog cyrff cyhoeddus i fod yn agored a hybu preifatrwydd data i unigolion.

Camau gorfodi

60 in total

CPS Advisory Limited

10 September 2020, Monetary penalties

Swansea company CPS Advisory Ltd was fined £130,000 for making more than 100,000 unauthorised direct marketing calls to people about their pensions.

Koypo Laboratories Ltd

12 August 2020, Enforcement notices, Marketing

Organisation is responsible for instigating the transmission of 21,166,574 unsolicited communications by means of electronic mail to subscribers for the purposes of direct marketing between 1 March 2017 and 31 March 2018 without their consent.

Koypo Laboratories Ltd

12 August 2020, Monetary penalties, Marketing

Organisation is responsible for instigating the transmission of 21,166,574 unsolicited communications by means of electronic mail to subscribers for the purposes of direct marketing between 1 March 2017 and 31 March 2018 without their consent.

Rain Trading Ltd

03 August 2020, Monetary penalties, Marketing

Organisation responsible for making 270,774 unsolicited direct marketing calls to subscribers on the TPS register without valid consent between 1 January 2018 and 29 November 2018.

Decision Technologies Limited

02 July 2020, Monetary penalties, Marketing

Price comparison and technology company fined £90,000 for a contravention of Regulation 22 of the Privacy and Electronic Communications (EC Directive) Regulations 2003

Black Lion Marketing Ltd

27 March 2020, Monetary penalties, Marketing

Black Lion Marketing Ltd fined £171,000 for making unsolicited direct marketing calls.

Nicola Young

13 March 2020, Prosecutions, Local government

A Town Clerk at Whitchurch Town Council has been prosecuted for intentionally blocking records with the intent to prevent disclosure.  

Cathay Pacific

04 March 2020, Monetary penalties, Transport and leisure

Cathay Pacific Airways Limited £500,000 for failing to protect the security of its customers’ personal data. Between October 2014 and May 2018 Cathay Pacific’s computer systems lacked appropriate…

CRDNN Limited

02 March 2020, Enforcement notices, Marketing

CRDNN Limited issued with enforcement notice after making more than 193 million automated nuisance calls.

CRDNN Limited

02 March 2020, Monetary penalties, Marketing

CRDNN Limited fined with the maximum £500,000 fine for making more than 193 million automated nuisance calls.

Leo Kirk

15 January 2020, Prosecutions, Social care

A former social worker has been prosecuted for passing the personal information of service users to a third party provider for Local Authority young person placements.

DSG Retail Ltd

09 January 2020, Monetary penalties, Retail and manufacture

The Information Commissioner’s Office (ICO) has fined DSG Retail Limited (DSG) £500,000 after a ‘point of sale’ computer system was compromised as a result of a cyber-attack, affecting at least 14 million people.

Doorstep Dispensaree Ltd

20 December 2019, Monetary penalties, Health

The Information Commissioner’s Office (ICO) has fined a London-based pharmacy £275,000 for failing to ensure the security of special category data. Doorstep Dispensaree Ltd, which supplies medicines to customers and care homes, left approximately 500,000 documents in unlocked containers at the back of its premises in Edgware. The documents included names, addresses, dates of birth, NHS numbers, medical information and prescriptions belonging to an unknown number of people.

Doorstep Dispensaree Ltd

20 December 2019, Enforcement notices, Health

The Information Commissioner’s Office (ICO) has fined a London-based pharmacy £275,000 for failing to ensure the security of special category data. Doorstep Dispensaree Ltd, which supplies medicines to customers and care homes, left approximately 500,000 documents in unlocked containers at the back of its premises in Edgware. The documents included names, addresses, dates of birth, NHS numbers, medical information and prescriptions belonging to an unknown number of people.

Dannyelle Shaw

05 December 2019, Prosecutions, Local government

A former Reablement Officer at Walsall Metropolitan Borough Council has been prosecuted for accessing social care records without authorisation.

Michelle Shipsey

02 December 2019, Prosecutions, Local government

A former Social Services Support Officer at Dorset County Council has been prosecuted for accessing Social Care records without authorisation.

Superior Style Home Improvements Ltd

17 September 2019, Monetary penalties, Marketing

Superior Style Home Improvements Ltd issued with monetary penalty notice after making unsolicited marketing calls to individuals registered with the TPS to try and generate UPVC installation leads.

Superior Style Home Improvements Ltd

17 September 2019, Enforcement notices, Marketing

Superior Style Home Improvements Ltd issued with enforcement notice after making unsolicited marketing calls to individuals registered with the TPS to try and generate UPVC installation leads.

Hudson Bay Finance Ltd

12 August 2019, Enforcement notices, Finance insurance and credit

Hudson Bay Finance Ltd issued with an enforcement notice for failing to respond to a subject access request.

Making it Easy Ltd

02 August 2019, Enforcement notices, Retail and manufacture

Making it Easy Ltd has been fined £160,000 by the Information Commissioner’s Office (ICO) for making spam calls to people registered with the Telephone Preference Service (TPS). The ICO has also issued an enforcement notice to Making it Easy Ltd ordering it to stop its illegal marketing activity.

Making it Easy Ltd

02 August 2019, Monetary penalties, Retail and manufacture

Making it Easy Ltd has been fined £160,000 by the Information Commissioner’s Office (ICO) for making spam calls to people registered with the Telephone Preference Service (TPS).

Life at Parliament View Limited

19 July 2019, Monetary penalties, Land or property services

Life at Parliament View Ltd fined £80,000 for leaving 18,610 customers' personal data exposed for almost two years.

Metropolitan Police Service

25 June 2019, Enforcement notices, Criminal justice

Enforcement notices served under the 1998 and 2018 Data Protection Acts for sustained failures to comply with individuals' rights in respect of subject access requests.

EE Limited

24 June 2019, Monetary penalties, Online technology and telecoms

EE Limited fined £100,000 for sending over 2.5 million direct marketing messages to its customers, without consent.  

David Cullen

24 June 2019, Prosecutions, General business

A former managing director of a claims management company who unlawfully obtained and sold personal data has been prosecuted. David Cullen was the managing director of No1 Accident Claims Limited based in Manchester. The core business of the company was the obtaining and subsequent sale of personal data relating to policy holders of car insurance who had been involved in road traffic accidents. Cullen, of Manchester, appeared before Manchester Crown Court on 21 counts of unlawfully obtaining and selling personal data in breach of s55 of the Data Protection Act 1998. He was sentenced to a fine totalling £1050.00, ordered to pay costs of £250.00 and was disqualified from being a director for five years. Confiscation under the Proceeds of Crime Act 2002 was commenced with the benefit figure from the illegal activity totalling £1,434,679.60. Due to Cullen’s lack of assets, a £1 nominal order was made.