Reprimands
Local Government Data Unit - Wales
No fineReprimands
Root cause
Unlawful direct marketing
Nuisance calls, spam texts or emails sent without valid consent — enforced under PECR rather than UK GDPR.
What happened
Welsh organisation reprimanded after cyber-attack exposed children’s information.
Summarised from the notice published by the ICO on 14 October 2026. Read the original notice — it is the authoritative version.