Emma's Diary fined £140,000 for Illegally Collecting and Selling Personal Data
Published on: 20th August 2018
By PYXI GDPR Team
The latest enforcement action from the ICO has been published. This time it's to Emma's Diary for;
"illegally collecting and selling personal information belonging to more than one million people." [Read more here.]
The company is reported as having harvested the data and then sold it on to Experian without consent for use by The Labour Party.
The data included:
"name of parent, household address, the presence of children up to 5 years old and the child's date of birth"
This was gathered via the online registration form on the Emma's Diary website.
In a complex judgement, the ICO issued a fine of £140,000.
This is yet another reminder to make sure that all personal data held by, used, and shared by an organisation complies with the latest Data Protection Act 2018, and GDPR.
If you need help with auditing and managing your GDPR/DPA Compliance then sign up for PYXI for GDPR today and start taking control of your compliance journey.
PYXI GDPR Team: 20th Aug 2018 09:34:00
Subscribe to our
Weekly GDPR Newsletter.
It's full of really useful updates
for UK small businesses.
ICO Q2 Data Security Incident Trends
The ICO's figures for Q2 show that the most frequently reported data security incident relates to disclosure of data. The ICO's website has published information about Q2 2018-19's data security incidents by type and sector, and the single mo... click to read more