Cambridge Analytica going into Administration

04 May 2018

The news that Cambridge Analytica, the British political consultancy firm, and their parent company SCL Group has gone into administration must serve as a warning to businesses to place the processing of personal data at their core. This is especially the case with the impending GDPR regulations, coming into force on 25 May 2018.

Cambridge Analytica by their own wording “Data drives all we do.  Cambridge Analytica uses data to change audience behavior.” has blamed a media blitz and stream of negative attention on driving away their client and supplier base to such an extent that they can no longer operate.

However, this does not mean that Cambridge Analytica will escape further, as the Information Commissioner’s Office (ICO) will still be continuing their investigation into the company for any suspected data breaches and contravention of the Data Protection Act 1998 principles.

Cambridge Analytica could therefore still face further sanctions, despite not being operational. Despite promises to work with the UK in the wake the scandal and an insistence that nothing done was illegal, Cambridge Analytica reportedly missed the deadline for providing information to the ICO.

The ICO which has been looking specifically into the British firm's handling of data harvested from millions of Facebook users, and raided its offices in March, said the inquiry would continue.

What does this mean for businesses?

Simply going into administration will not mean that the ICO will cease their investigation, so this should not be seen as a way to “escape” sanction.

All businesses (especially those that have data processing/harvesting at their core) must be transparent and open with individuals and ensure that individuals are fully informed, and where necessary, ensure that their explicit consent is provided.

To process personal data, a business must ensure it has the basis to do so, the main basis being:

  1. The performance of contractual obligations
  2. For compliance with a legal obligation to which the Data Controller (you) are subject
  3. To protect the data subjects vital interests
  4. Consent

If relying on consent, this must be clear, explicit and demonstrable.


Further reading

CMA fines pharmaceutical company more than £100m

Drug pricing policies under scrutiny as CMA comes down hard on inflated prices and supernormal profits
Read more Read

5 data protection changes to be aware of

Commercial law specialist Liz Gillingham provides a summary of recent developments in data protection law
Read more Read

Destination: office?

Blog, News & PR
Emily Wood considers the results of our recent survey and the implications for the future of the post-pandemic workplace
Read more Read

Commercial lease renewals and pandemic clauses

Will commercial reality trump the law when leases are up for renewal? Property expert James Picknell takes a look
Read more Read
  • Brighton Office

    1 Jubilee Street


    East Sussex

    BN1 1GE

  • Gatwick Office

    Griffin House

    135 High Street


    West Sussex

    RH10 1DQ

  • Guildford Office

    Wonersh House

    The Guildway

    Old Portsmouth Road



    GU3 1LR

  • Horsham Office

    Ridgeland House

    15 Carfax


    West Sussex

    RH12 1DY

  • London Office

    6 New Street Square

    New Fetter Lane


    EC4A 3BF

  • Get in touch