News stories tagged with fines

Proposals for EU DP Regulation: Mandatory DPOs and fines up to 2% of annual turnover

Please login or register to see this full article.

The European Commission proposes more accountability – no general notification duty – but bigger fines for non-compliance in the official proposals published today by the European Commission. The highest fine that was being planned, 5% of annual...

Poor data destruction of sexual health and staff data leads to £325,000 highest ever fine by UK ICO

Please login or register to see this full article.

The UK Information Commissioner (ICO) announced today a record fine of £325,000 on Brighton and Sussex University Hospitals NHS Foundation Trust over failure to properly dispose of around 1,000 computer hard drives. As a result, 252 hard drives,...

Spanish DPA leads EU fining league table but signs of DPA policy changing after a European Court decision

Please login or register to see this full article.

Spain’s national Data Protection Authority, the Agencia Española de Protección de Datos (AEPD), announced on 25th September that it imposed fines of 19,597,906 Euros in 2011. In the most recent years for which data is available, Spain’s fines...

ICO fines two companies £225,000 for PECR breaches

Please login or register to see this full article.

The Information Commissioner’s Office (ICO) has again targeted companies that do not honour individuals’ opt out from marketing calls through the Telephone Preference Service. Nationwide Energy Services has received a penalty of £125,000, and We...

ICO: Fines are effective at improving data protection compliance

Please login or register to see this full article.

Recent research by the ICO on the Impact of Civil Monetary Penalties (CMPs) suggests that organisations that have been issued with a fine now take their data protection obligations seriously, with revised practices and policies, and increased staf...

US Federal Communications Commission fines two phone companies $10 million

Please login or register to see this full article.

The US Federal Communications Commission (FCC) issued, on 24 October, a 10 million dollar fine for breaching consumer privacy and data security. The phone companies, TerraCom and its affiliate YourTel America, claimed in their privacy policies tha...

ICO fines Serious Fraud Office £180,000 and warns other law enforcement agencies

Please login or register to see this full article.

The ICO has announced today that it has fined the Serious Fraud Office (SFO) £180,000 for wrongly disclosing evidence to witnesses in a bribery investigation. The bribery investigation into senior executives at BAE Systems had been concluded in...

Magistrates’ courts can now impose unlimited fines for DP Act criminal offences

Please login or register to see this full article.

Since 12 March, Magistrates’ courts are no longer limited to £5,000 fines for criminal offences under the DP Act. The Legal Aid, Sentencing and Punishment of Offenders Act 2012 (Fines on Summary Conviction) Regulations 2015, which allow for an...

TalkTalk loses appeal at Information Tribunal: No leeway in data breach notification

Please login or register to see this full article.

The Information Tribunal (The First Tier Tribunal) has dismissed TalkTalk’s appeal against the ICO’s decision to fine it £1,000 for a late data breach notification. The ICO had, on 17 February 2016, sent a Notice of Intent to issue a fixed monetar...

ICO: The GDPR regime will not mean changes in its appetite for fining

Please login or register to see this full article.

The government’s statement of intent on Monday this week to legislate in GDPR-style also confirmed GDPR-level fines, but the Information Commissioner, Elizabeth Denham, says that maximum fines will not become the norm. Writing in a blog today,...

Belgian Court rules for Belgium’s Data Protection Commission against Facebook

Please login or register to see this full article.

In a decisive ruling, the Brussels Court of First Instance ruled on 16th February in an 84 page judgement that Facebook must stop placing cookies on users’ computers unless: 1 - It has informed users “in a clear and comprehensive manner, fully and...

ICO will take proportionate approach to GDPR fines

Please login or register to see this full article.

The ICO is not planning to issue fines in every circumstance when it detects a breach of the GDPR (or implementing legislation), ICO’s Steve Eckersley said at the CDPD conference in Brussels. Eckersley stated that the ICO will also have other...

Government consults on making directors liable for nuisance calls

Please login or register to see this full article.

The government has launched a consultation on proposals to amend the Privacy and Electronic Communications Regulations  to make directors liable for nuisance calls. Maximum fines would be up to £500,000, and if a firm has multiple directors, each...

First significant GDPR fines in the pipeline

Please login or register to see this full article.

The European Data Protection Supervisor, Giovanni Buttarelli, says that we can expect to see DPAs take enforcement action soon, Buttarelli told Reuters in an interview: “I expect [the] first GDPR fines for some cases by the end of the year. Not...

EDPB dealing with 162 cross border cases but no fines issued as yet

Please login or register to see this full article.

The European Data Protection Board (EDPB) has by now 162 cross-border cases on its case register, the Board’s Chair Andrea Jelinek said in Brussels today. She would not confirm when the first large fines would be issued - ‘we are investigating’ sh...

ICO confirms Facebook’s £500,000 fine and is to give evidence in Parliament on political influencing

Please login or register to see this full article.

The Information Commissioner’s Office (ICO) has fined Facebook £500,000 for serious breaches of data protection law in the context of its wide-ranging investigation into the use of data analytics for political purposes. The company’s representatio...

Google fined €50 million in France for GDPR breach about consent

France’s Data Protection Authority, the CNIL, has today announced a 50 million euro fine on Google LLC for lack of transparency, inadequate information and lack of valid consent regarding the  personalisation of advertisements. The case was...

The Netherlands DPA confirms its GDPR fining policy

The Netherlands’ Data Protection Authority has published its GDPR fining policy which divides breaches into four categories according to their severity. The overlapping categories are: 1. up to 200,000 euros 2. 120,000 to 500,000 euros 3. 300,000 ...