ICO enforcement—database

The following Commercial practice note provides comprehensive and up to date legal information covering:

  • ICO enforcement—database
  • Database notes
  • Regulatory and enforcement action by the Information Commissioner
  • Enforcement action under the GDPR and Data Protection Act 2018
  • ICO regulatory action policy
  • Monitoring enforcement and compliance trends

ICO enforcement—database

IP COMPLETION DAY: 11pm (GMT) on 31 December 2020 marks the end of the Brexit transition/implementation period entered into following the UK’s withdrawal from the EU. At this point in time (referred to in UK law as ‘IP completion day’), key transitional arrangements come to an end and significant changes begin to take effect across the UK’s legal regime. This document contains guidance on subjects impacted by these changes. Before continuing your research, see Practice Note: What does IP completion day mean for public law?

This database sets out details of recent enforcement actions taken by the Information Commissioner's Office (ICO). It is accessible by clicking on the link below:

Database notes

The database is separated into four sections:

  1. enforcement notices

  2. undertakings

  3. monetary penalties

  4. prosecutions

In each section:

  1. the first column of each section of the database lists the data controller/person concerned with a link to the underlying notice, decision or undertaking, where available from the ICO website

  2. the second and third columns set out the sector concerned and a summary of the decision

  3. the remaining columns provide further details including the date, the provision contravened, the nature of the contravention and the amount of any penalty, fine or costs (as applicable)

If any of the cells are blank, this indicates that the information was not provided in the relevant notice. Further details of enforcement action taken by

Popular documents