Root cause
Unlawful direct marketing
Nuisance calls, spam texts or emails sent without valid consent — enforced under PECR rather than UK GDPR.
113
UK enforcement actions
£3.52m
in penalties
15
sectors affected
Where it happens
- Marketing28
- Unspecified26
- Finance insurance and credit17
- Utilities10
- General business9
- Retail and manufacture5
- Local government4
- Criminal justice3
- Central government3
- Online technology and telecoms2
- Health2
- Charitable and voluntary1
- Education and childcare1
- Social care1
- Regulators1
Every case
- Thermotech Wall and Loft Surveys Ltd In April 2025, the ICO carried out a search warrant to obtain evidence in relation to TWLS and its compliance with PECR. Following…
- Thermotech Wall and Loft Surveys Ltd In April 2025, the ICO carried out a search warrant to obtain evidence in relation to TWLS and its compliance with PECR. Following…
- KRA Consultancy Ltd KRA Consultancy Ltd was fined £300,000 for sending over 5.5 million unsolicited direct marketing and fake bailiff texts in breach …
- KRA Consultancy Ltd KRA Consultancy Ltd was issued with an enforcement notice for sending over 5.5 million unsolicited direct marketing and fake baili…
- SA Assistance Ltd Contravention of Regulation 21A and 24 of the PECR. SA Assistance Ltd instigated calls to individuals about claims management serv…
- Energy Prices Direct Limited Contravention of Regulations 21 and 24 of the PECR. Energy Prices Direct Limited offer energy switching services. Information demo…
- Jacksons Marketing Ltd Jacksons Marketing Ltd was fined £130,000 for making 232,776 unsolicited live direct marketing calls between 29 January 2024 and 1…
- Jacksons Marketing Ltd Jacksons Marketing Ltd was fined £130,000 for making 232,776 unsolicited live direct marketing calls between 29 January 2024 and 1…
- Christopher Munro and William Chipoma Two further people have been convicted following our extensive investigation into the unlawful accessing and sale of personal info…
- TMAC Ltd TMAC contravened regulations 21 and 24 of PECR and the ICO issued a monetary penalty of £100,000 and an enforcement notice. Betw…
- TMAC Ltd TMAC contravened regulations 21 and 24 of PECR and the ICO issued a monetary penalty of £100,000 and an enforcement notice. Betw…
- Allay Claims Ltd MPN and EN issued to Allay Claims Ltd due to a large volume of unsolicited SMS being sent, promoting PPI tax refund services
- Allay Claims Ltd MPN and EN issued to Allay Claims Ltd due to a large volume of unsolicited SMS being sent, promoting PPI tax refund services
- Police Service of Scotland The Information Commissioner's Office (ICO) has fined the Police Service of Scotland £66,000 and issued a Reprimand for serious fa…
- ZMLUK Limited ZMLUK Limited were issued with an MPN due to sending unsolicited emails promoting energy saving products.
- Lead Pronto Ltd Lead Pronto Ltd were issued with an MPN and an EN due to sending unsolicited SMS promoting Government funded boiler grants.
- Lead Pronto Ltd Lead Pronto Ltd were issued with an MPN and an EN due to sending unsolicited SMS promoting Government funded boiler grants.
- Bharat Singh Chand Bharat Singh Chand is a self-employed lead generator. Between 3 December 2023 and 3 July 2024, he sent or instigated the sending o…
- Bharat Singh Chand Bharat Singh Chand is a self-employed lead generator. Between 3 December 2023 and 3 July 2024, he sent or instigated the sending o…
- Green Spark Energy Ltd Green Spark Energy Ltd (GSE) was investigated as part of a wider operation set up by the Commissioner to assess and analyse compla…
- Green Spark Energy Ltd Green Spark Energy Ltd (GSE) was investigated as part of a wider operation set up by the Commissioner to assess and analyse compla…
- Home Improvement Marketing Ltd Home Improvement Marketing Ltd (HIML) was investigated as part of a wider operation set up by the Commissioner to assess and analy…
- Home Improvement Marketing Ltd Home Improvement Marketing Ltd (HIML) was investigated as part of a wider operation set up by the Commissioner to assess and analy…
- Birthlink The Information Commissioner’s Office (ICO) has fined Scottish charity Birthlink £18,000 after it destroyed approximately 4,800 pe…
- Darian Bishop trading as ECO4U Between 9 January 2023 to 9 October 2023, there were 194,110 unsolicited direct marketing calls made to subscribers who were regis…
- Darian Bishop trading as ECO4U Between 9 January 2023 to 9 October 2023, there were 194,110 unsolicited direct marketing calls made to subscribers who were regis…
- DPP Law Ltd The Information Commissioner has fined law firm DPP Law Ltd £60,000 for its infringements of Articles 5(1)(f), 32(1), 32(2) and 33…
- Smart Home Ensured Limited Between 4 July 2023 to 24 August 2023 Smart Home Ensured Limited made 14,508 unsolicited calls for direct marketing purposes in br…
- Breathe Services Ltd Breathe Services Ltd (BSL), a debt advice company based in Bolton, first came to the attention of the ICO as part of a wider inves…
- Breathe Services Ltd Breathe Services Ltd (BSL), a debt advice company based in Bolton, first came to the attention of the ICO as part of a wider inves…
- ESL Consultancy Services Ltd Between 15 September 2022 and 5 December 2023, a total of 37,977 complaints were received regarding direct marketing messages whic…
- ESL Consultancy Services Ltd Between 15 September 2022 and 5 December 2023, a total of 37,977 complaints were received regarding direct marketing messages whic…
- National Debt Advice Limited National Debt Advice sent 129,902 unsolicited direct marketing text messages to individuals in breach of regulation 22 of PECR res…
- National Debt Advice Limited National Debt Advice sent 129,902 unsolicited direct marketing text messages to individuals in breach of regulation 22 of PECR res…
- WerepairUK Ltd WerepairUK Ltd made 42,688 marketing calls to individuals in breach of regulation 21 of PECR. The company has been fined £80,000 a…
- WerepairUK Ltd WerepairUK Ltd made 42,688 marketing calls to individuals in breach of regulation 21 of PECR. The company has been fined £80,000 a…
- Service Box Group Limited Service Box Group Limited made 5,361 marketing calls to individuals in breach of regulation 21 of PECR. The company has been fined…
- Service Box Group Limited Service Box Group Limited made 5,361 marketing calls to individuals in breach of regulation 21 of PECR. The company has been fined…
- Police Service of Northern Ireland The Police Service of Northern Ireland has been fined £750,000 for infringing Articles 5(1)(f), 32(1) and (2) of the UK GDPR betwe…
- Bonne Terre Limited t/a Sky Betting and Gaming We issued a reprimand to Bonne Terre Limited, trading as Sky Betting and Gaming, for unlawfully processing people’s data through a…
- Coastal Windows & Conservatories (UK) Limited Coastal Windows & Conservatories Limited made over 18,000 unsolicited marketing calls between 1 January and 1 June 2023 to numbers…
- Coastal Windows & Conservatories (UK) Limited Coastal Windows & Conservatories Limited made over 18,000 unsolicited marketing calls between 1 January and 1 June 2023 to numbers…
- Pinnacle Life Limited Between 5 May 2021 to 5 May 2022, there were 47,998 connected calls unsolicited direct marketing calls being made to subscribers w…
- Pinnacle Life Limited Between 5 May 2021 to 5 May 2022, there were 47,998 connected calls unsolicited direct marketing calls being made to subscribers w…
- Penny Appeal The Information Commissioner’s Office (ICO) has issued an Enforcement Notice to Penny Appeal, for sending 461,650 spam text messag…
- Ministry of Defence The MOD sent emails inadvertently using the “To” field rather than the “BCC” field. 265 unique email addresses were disclosed in b…
- Dr Telemarketing Between 11 February 2021 to 24 January 2022, there were 80,240 connected calls unsolicited direct marketing calls being made to su…
- Dr Telemarketing Between 11 February 2021 to 24 January 2022, there were 80,240 connected calls unsolicited direct marketing calls being made to su…
- L.A.D.H Limited L.A.D.H Limited sent 31,329 direct market text messages to individuals in breach of regulation 22 and 23 of PECR. The company was …
- L.A.D.H Limited L.A.D.H Limited sent 31,329 direct market text messages to individuals in breach of regulation 22 and 23 of PECR. The company was …
- Poxell Ltd Poxell first came to the attention of the Commissioner in April 2022 as part of an investigation formed to assess and analyse comp…
- Poxell Ltd Poxell first came to the attention of the Commissioner in April 2022 as part of an investigation formed to assess and analyse comp…
- Skean Homes Ltd Skean first came to the attention of the Commissioner in 2022 as part of an operation formed to assess and analyse complaint trend…
- Skean Homes Ltd Skean first came to the attention of the Commissioner in 2022 as part of an operation formed to assess and analyse complaint trend…
- Grocery Delivery E-Services UK Ltd t/a HelloFresh The Information Commissioner’s Office (ICO) has fined food delivery company HelloFresh £140,000 for a campaign of 79 million spam …
- Daniel George Bentley and Taipan Trading Ltd Daniel George Bentley is a sole trader and director of Taipan Trading Ltd. Between 1 May 2022 and 31 July 2023 he and his company …
- NHS Fife The Information Commissioner’s Office (ICO) has issued a reprimand to NHS Fife, after an unauthorised individual was able to enter…
- Intelling Ltd Between 1 January 2021 and 11 November 2021, Intelling sent 1,164,877 direct marketing messages in breach of Reg 22 of PECR. I…
- Complete Marketing Services Ltd Between 8 June 2021 and 4 February 2022, CMS instigated 242,497 unsolicited direct marketing calls in breach of Reg 21 and 24 of P…
- Complete Marketing Services Ltd Between 8 June 2021 and 4 February 2022, CMS instigated 242,497 unsolicited direct marketing calls in breach of Reg 21 and 24 of P…
- DPG Professional Services Ltd Between 3 August 2021 and 3 August 2022, DPG made 74,119 unsolicited calls for direct marketing purposes in breach of Reg 21 of PE…
- DPG Professional Services Ltd Between 3 August 2021 and 3 August 2022, DPG made 74,119 unsolicited calls for direct marketing purposes in breach of Reg 21 of PE…
- Argentum Data Solutions Ltd Between 1 January 2021 and 31 January 2022 there were a total of 2,330,423 SMS sent without consent. 24,309 were sent by ADS direc…
- Argentum Data Solutions Ltd Between 1 January 2021 and 31 January 2022 there were a total of 2,330,423 SMS sent without consent. 24,309 were sent by ADS direc…
- Outsource Strategies Ltd Outsource Strategies Ltd made 1,346,503 unwanted marketing calls between 11 February 2021 and 22 March 2022 to numbers registered …
- Outsource Strategies Ltd Outsource Strategies Ltd made 1,346,503 unwanted marketing calls between 11 February 2021 and 22 March 2022 to numbers registered …
- Digivo Media Limited Between 24 March 2021 and 7 September 2021 there were 415,041 texts delivered without valid consent – breach of Regulation 22 of P…
- Digivo Media Limited Between 24 March 2021 and 7 September 2021 there were 415,041 texts delivered without valid consent – breach of Regulation 22 of P…
- MCP Online Ltd Between 1 January 2022 and 28 September 2022 there were 20,939 calls made to CTPS or TPS registered numbers – breach of Reg 21 and…
- MCP Online Ltd Between 1 January 2022 and 28 September 2022 there were 20,939 calls made to CTPS or TPS registered numbers – breach of Reg 21 and…
- RHAP Ltd RHAP Ltd made 15,288 marketing calls to individuals in breach of regulation 21 of PECR. The company was fined £65,000 and issued w…
- RHAP Ltd RHAP Ltd made 15,288 marketing calls to individuals in breach of regulation 21 of PECR. The company was fined £65,000 and issued w…
- House Hold Appliances 247 Ltd House Hold Appliances 247 Ltd made 19,069 marketing calls to individuals in breach of regulation 21 of PECR. The company was fined…
- House Hold Appliances 247 Ltd House Hold Appliances 247 Ltd made 19,069 marketing calls to individuals in breach of regulation 21 of PECR. The company was fined…
- F12 Management Ltd F12 Management Ltd made 1,346,019 marketing calls to individuals in breach of regulation 21 of PECR. The company was fined £200,00…
- F12 Management Ltd F12 Management Ltd made 1,346,019 marketing calls to individuals in breach of regulation 21 of PECR. The company was fined £200,00…
- Cover Appliance Ltd Cover Appliance Ltd made 511,499 marketing calls to individuals in breach of regulation 21 of PECR. The company was fined £200,000…
- Cover Appliance Limited Cover Appliance Ltd made 511,499 marketing calls to individuals in breach of regulation 21 of PECR. The company was fined £200,000…
- SGS Home Protect Ltd SGS Home Protect Ltd made 24,214 marketing calls to individuals in breach of regulation 21 of PECR. The company was fined £70,000 …
- SGS Home Protect Ltd SGS Home Protect Ltd made 24,214 marketing calls to individuals in breach of regulation 21 of PECR. The company was fined £70,000 …
- Simply Connecting Ltd Simply Connecting Ltd sent 441,830 direct marketing text messages to individuals in breach of regulation 22 of PECR. The company w…
- Simply Connecting Ltd Simply Connecting Ltd sent 441,830 direct marketing text messages to individuals in breach of regulation 22 of PECR. The company w…
- This Is The Big Deal Limited This Is The Big Deal Limited sent or instigated the sending of 41,417,889 unsolicited direct marketing messages (39,906,342 emails…
- Fortis Insolvency Limited Fortis Insolvency Limited sent 558,354 direct marketing SMS messages without valid consent with 527,481 received by subscribers be…
- Fortis Insolvency Limited Fortis Insolvency Limited sent 558,354 direct marketing SMS messages without valid consent with 527,481 received by subscribers be…
- Maxen Power Supply Limited Maxen Power Supply Limited used overseas call centres to make unsolicited marketing calls to businesses in contravention of regula…
- Crown Glazing Ltd The case was part of Operation Tinago which was formed to assess and analyse complaint trends in relation to the energy and home i…
- Crown Glazing Ltd The case was part of Operation Tinago which was formed to assess and analyse complaint trends in relation to the energy and home i…
- Maxen Power Supply Limited Maxen Power Supply Limited used overseas call centres to make unsolicited marketing calls to businesses in contravention of regula…
- Parkside Community Primary School A reprimand has been issued to Parkside Community Primary School in relation to the infringements of Article 5 (1)(f), Article 24 …
- Ice Telecommunications Ltd Ice Telecommunications Ltd made 72,682 unsolicited marketing calls to businesses registered with the CTPS or TPS between 13 Septem…
- Ice Telecommunications Ltd Ice Telecommunications Ltd made 72,682 unsolicited marketing calls to businesses registered with the CTPS or TPS between 13 Septem…
- UK Direct Business Solutions Limited UK Direct Business Solutions Limited made 410,369 unsolicited marketing calls to businesses registered with the CTPS or TPS betwee…
- Shropshire Council The Information Commissioner’s Office (ICO) has issued an enforcement notice to Shropshire Council for its poor handling of reques…
- Norfolk County Council Norfolk County Council has only responded to 260 out of 511 SARs it received within the statutory timescales from 6 April 2021 to …
- Ministry of Justice 14 bags of confidential waste were found in an unsecured holding area in the prison, which both prisoners and staff had access to.
- Join the Triboo Limited Between 1 August 2019 and 19 August 2020, a confirmed total of 107 million direct marketing messages were sent by Join the Triboo …
- Join the Triboo Limited Between 1 August 2019 and 19 August 2020, a confirmed total of 107 million direct marketing messages were sent by Join the Triboo …
- Achieving for Children Due to communication failure and a lack organisational measures, AfC inappropriately disclosed personal data, special category dat…
- It's OK Limited Between 1 July 2019 and 1 June 2020, It’s OK Limited engaged in the transmission of 1,752,149 unsolicited calls for direct marketi…
- It's OK Limited Between 1 July 2019 and 1 June 2020, It’s OK Limited engaged in the transmission of 1,752,149 unsolicited calls for direct marketi…
- Monetise Media Limited Between 28 July 2020 and 28 July 2021, Monetise Media Limited engaged in the transmission of a total of 3,506,157 direct marketing…
- Power Leisure Bookmakers Limited The ICO has issued PLB with a reprimand, in accordance with Article 58 of the UK GDPR, following breaches reported to the ICO on 2…
- London Borough of Hackney For the period of April 2020 to February 2021, London Borough of Hackney did not respond to over 60% of the SARs submitted to them…
- Virgin Media Limited Over a 6 month period in 2021, Virgin Media received over 9500 SARs. 14% of these were not responded to during the statutory timef…
- Crown Prosecution Service A reprimand was issued after an investigation into three separate incidents involving the loss of personal data.
- Grindr LLC The ICO deemed that Grindr has failed to provide effective and transparent privacy information to its UK data subjects in relation…
- Allied Health Professionals Allied Health Professionals have been issued with a reprimand for accidentally making data accessible to health care providers whe…
- Warrington and Halton Hospitals NHS Foundation Trust An appointments administrator uploaded a patient’s urgent referral form to the wrong patient’s notes.
- North Yorkshire County Council An NYCC employee failed to accurately complete the print to post process and as a result two envelopes containing multiple letters…
- Chief Constable of North Yorkshire Police North Yorkshire Police has been issued with a reprimand in accordance with Schedule 13 (2) of the DPA 2018.
- NHS National Services Scotland (NHS NSS) The Scottish Government and NHS National Services Scotland (NHS NSS) has been issued with a reprimand in accordance with Article 5…
- Welsh Language Commissioner The ICO have decided to issue the WLC with a reprimand in accordance with Article 58(2)(b) of the General Data Protection Regulati…