Significant fine for parenting club Bounty following ‘unprecedented’ data breach

12 Apr 2019

Bounty Pregnancy Club has been hit with near-maximum £400,000 fine by the Information Commissioners Office (ICO) for not being “open or transparent” with people about the fact their personal data may have been passed on other organisations.

The breach related to illegally selling personal details of more than 14 million parents to credit reference and marketing agencies.

Bounty shared approximately 34.4 million records between June 2017 and April 2018 and the personal information shared included personal information about mothers-to-be and that of young children.

It could have been worse had the offence taken place after 25 May 2018 when the EU’s stricter General Data Protection Regulation came into force. However because the offences occurred before GDPR came into force, the breach was dealt with under the Data Protection Act 1998, which has a maximum fine of £500,000. The GDPR and the DPA2018 gave the ICO new strengthened powers. Since 25 May 2018, the ICO has the power to impose monetary penalty of £17million (20m Euro) or 4% of global turnover.

This serves as a warning that data protection is still a live issue and the ICO will fine companies for “unprecedented” breaches like this. It should serve as a timely reminder to companies to check their privacy policies to make sure they share as much information as possible as to who, if any, information may be shared with.  The ICO investigation reports that Bounty’s privacy notices on its website had a “reasonably clear description of the organisations they might share information with”, but that none of the four largest recipients were listed.

Please contact us if you need advice on your privacy policy or anything to do with GDPR.

Further reading

Employer's question: how to effectively deal with stress related sickness in lockdown

Blog
13/04/2021
There are a variety of contributing factors caused by the pandemic that have seen a rise in stress related claims at work, but how can employers deal with this more effectively?
Read more Read

Use of statutory demand to make company insolvent suspended until June

Blog, Legal Updates
08/04/2021
Cheraine Williams looks at more temporary Covid-driven measures that will protect businesses and tenants from possible legal action
Read more Read

New guidance issued for valuation of flats and investigating fire safety

Blog, Legal Updates
07/04/2021
Cheraine Williams looks a the current situation facing leaseholders looking to sell or re-finance their property; will new guidance provide clarity?
Read more Read

Government sets new energy targets for domestic and commercial buildings

Blog, Legal Updates
06/04/2021
UK law requires net zero greenhouse gas emissions by 2050; new rules and standards for heating and powering buildings will have a significant impact
Read more Read
  • Brighton Office

    1 Jubilee Street

    Brighton

    East Sussex

    BN1 1GE

  • Gatwick Office

    Griffin House

    135 High Street

    Crawley

    West Sussex

    RH10 1DQ

  • Guildford Office

    Wonersh House

    The Guildway

    Old Portsmouth Road

    Guildford

    Surrey

    GU3 1LR

  • Horsham Office

    Ridgeland House

    15 Carfax

    Horsham

    West Sussex

    RH12 1DY

  • London Office

    6 New Street Square

    New Fetter Lane

    London

    EC4A 3BF

  • Get in touch