Emma's Diary fined £140,000 for Illegally Collecting and Selling Personal Data

Published on: 20th August 2018
By PYXI GDPR Team


The latest enforcement action from the ICO has been published. This time it's to Emma's Diary for;

"illegally collecting and selling personal information belonging to more than one million people." [Read more here.]

The company is reported as having harvested the data and then sold it on to Experian without consent for use by The Labour Party.

The data included:

"name of parent, household address, the presence of children up to 5 years old and the child's date of birth"

This was gathered via the online registration form on the Emma's Diary website.

In a complex judgement, the ICO issued a fine of £140,000.

This is yet another reminder to make sure that all personal data held by, used, and shared by an organisation complies with the latest Data Protection Act 2018, and GDPR.

If you need help with auditing and managing your GDPR/DPA Compliance then sign up for PYXI for GDPR today and start taking control of your compliance journey.

PYXI GDPR Team: 20th Aug 2018 09:34:00