The ICO’s work in the media – our work to recover fines

The  New Statesman published a story about our fines issued since 2017. We can issue fines under the Data Protection Act 2018, which sets out the obligations for organisations using personal data in the UK, and under the Privacy and Electronic Communications Regulations (PECR), which sets out the rules around marketing by electronic means, including marketing calls, texts, emails and faxes.