Significant fine for parenting club Bounty following ‘unprecedented’ data breach

12 Apr 2019

Bounty Pregnancy Club has been hit with near-maximum £400,000 fine by the Information Commissioners Office (ICO) for not being “open or transparent” with people about the fact their personal data may have been passed on other organisations.

The breach related to illegally selling personal details of more than 14 million parents to credit reference and marketing agencies.

Bounty shared approximately 34.4 million records between June 2017 and April 2018 and the personal information shared included personal information about mothers-to-be and that of young children.

It could have been worse had the offence taken place after 25 May 2018 when the EU’s stricter General Data Protection Regulation came into force. However because the offences occurred before GDPR came into force, the breach was dealt with under the Data Protection Act 1998, which has a maximum fine of £500,000. The GDPR and the DPA2018 gave the ICO new strengthened powers. Since 25 May 2018, the ICO has the power to impose monetary penalty of £17million (20m Euro) or 4% of global turnover.

This serves as a warning that data protection is still a live issue and the ICO will fine companies for “unprecedented” breaches like this. It should serve as a timely reminder to companies to check their privacy policies to make sure they share as much information as possible as to who, if any, information may be shared with.  The ICO investigation reports that Bounty’s privacy notices on its website had a “reasonably clear description of the organisations they might share information with”, but that none of the four largest recipients were listed.

Please contact us if you need advice on your privacy policy or anything to do with GDPR.

Further reading

Tenants take note: dilapidations damages to be subject to VAT

Blog, Legal Updates
Property expert Cheraine Williams explains why dilapidations could be about to get more expensive
Read more Read

Covid business interruption insurance payments due to small and medium companies

Blog, Legal Updates
Partner Jonathan Compton looks at the Supreme Court’s decision on business interruption insurance
Read more Read

DMH Stallard’s corporate team shortlisted for four awards

Blog, News & PR
Current Corporate Law Firm of the Year hoping to hold on to the title in 2021
Read more Read

IP in pole position in 2021

Victoria Watt takes a look at a hat trick of car-related cases that concluded last autumn that place IP firmly in the headlights
Read more Read
  • Brighton Office

    1 Jubilee Street


    East Sussex

    BN1 1GE

  • Gatwick Office

    Griffin House

    135 High Street


    West Sussex

    RH10 1DQ

  • Guildford Office

    Wonersh House

    The Guildway

    Old Portsmouth Road



    GU3 1LR

  • Horsham Office

    Ridgeland House

    15 Carfax


    West Sussex

    RH12 1DY

  • London Office

    6 New Street Square

    New Fetter Lane


    EC4A 3BF

  • Get in touch