Cambridge Analytica going into Administration

04 May 2018

The news that Cambridge Analytica, the British political consultancy firm, and their parent company SCL Group has gone into administration must serve as a warning to businesses to place the processing of personal data at their core. This is especially the case with the impending GDPR regulations, coming into force on 25 May 2018.

Cambridge Analytica by their own wording “Data drives all we do.  Cambridge Analytica uses data to change audience behavior.” has blamed a media blitz and stream of negative attention on driving away their client and supplier base to such an extent that they can no longer operate.

However, this does not mean that Cambridge Analytica will escape further, as the Information Commissioner’s Office (ICO) will still be continuing their investigation into the company for any suspected data breaches and contravention of the Data Protection Act 1998 principles.

Cambridge Analytica could therefore still face further sanctions, despite not being operational. Despite promises to work with the UK in the wake the scandal and an insistence that nothing done was illegal, Cambridge Analytica reportedly missed the deadline for providing information to the ICO.

The ICO which has been looking specifically into the British firm's handling of data harvested from millions of Facebook users, and raided its offices in March, said the inquiry would continue.

What does this mean for businesses?

Simply going into administration will not mean that the ICO will cease their investigation, so this should not be seen as a way to “escape” sanction.

All businesses (especially those that have data processing/harvesting at their core) must be transparent and open with individuals and ensure that individuals are fully informed, and where necessary, ensure that their explicit consent is provided.

To process personal data, a business must ensure it has the basis to do so, the main basis being:

  1. The performance of contractual obligations
  2. For compliance with a legal obligation to which the Data Controller (you) are subject
  3. To protect the data subjects vital interests
  4. Consent

If relying on consent, this must be clear, explicit and demonstrable.


Further reading

Protecting your brand in post-Brexit UK

Blog, News & PR
Now the UK has officially left the EU, it's more important than ever for UK businesses to look after their brands. Robert Ganpatsingh explains what to consider
Read more Read

Lockdown 3.0: no exception, no eviction

Blog, Legal Updates
Hannah Joad looks at new regulations extending residential tenants’ protection from eviction.
Read more Read

Supporting employees through the next lockdown

Managing your employees through uncertainty and equipping them to thrive, remain engaged and feel part of a team environment, must be a HR priority for 2021.
Read more Read

Remote working and home security

Blog, News & PR
With a large proportion of the workforce now working from home, security arrangements for home workers need to be addressed - Robert Ganpatsingh explains
Read more Read
  • Brighton Office

    1 Jubilee Street


    East Sussex

    BN1 1GE

  • Gatwick Office

    Griffin House

    135 High Street


    West Sussex

    RH10 1DQ

  • Guildford Office

    Wonersh House

    The Guildway

    Old Portsmouth Road



    GU3 1LR

  • Horsham Office

    Ridgeland House

    15 Carfax


    West Sussex

    RH12 1DY

  • London Office

    6 New Street Square

    New Fetter Lane


    EC4A 3BF

  • Get in touch