Three Lancaster businesses face £250k worth of fines after nearly 3,000 complaints made against them
These businesses are facing heavy fines after thousands of complaints were lodged against them.
Three businesses in Lancaster have been fined £250,000 for breaching data protection laws between 2023-2024.
Data breach experts, Hayes Connor, have done a deep dive into recent ICO data to assess how the cost of a data breach is affecting local businesses in the Lancaster area.
The penalties described in each case underscore the importance of robust measures to safeguard personal information and use it responsibly.
Monetary penalties in the Lancaster area were imposed in cases following investigations by the Information Commissioner's Office (ICO) after 2989 complaints were made collectively.
The total amount the businesses in Lancaster were fined, totalled £250,000.
The breakdown of the penalties for the Lancaster Business, are as follows:
Crown Glazing Ltd: £130,000 for making 503,445 unsolicited calls to TPS registered numbers between 4 January to 11 November 2021.
Simply Connecting Ltd: £40,000 for sending 441,830 direct marketing text messages to individuals in breach of regulation 22 of PECR.
Pinnacle Life Limited: £80,000 for making 47,998 unsolicited calls to individuals on TPS attempting to sell life insurance.
Richard Forrest, Legal Director at Hayes Connor, says: "From a legal standpoint, fines for data protection breaches serve multiple purposes.
“High fines deter businesses from neglecting their data protection obligations. The ICO's actions demonstrate that non-compliance can lead to substantial financial consequences, encouraging other businesses to prioritise data security.
“Fines also hold businesses accountable for their data management practices. Companies are legally required to protect personal data under the Data Protection Act 2018. Legal penalties incentivise businesses to comply with data protection laws.”
The reasons behind the complaints reveal significant lapses in how these businesses handle and use sensitive customer data, serving as a stark wake up call for Lancaster companies to take GDPR very seriously.
The data also serves as a call to action to victims of such breaches of GDPR to report nuisance callers and marketers, and other incidents that may be seen as minor breaches.
Richard Forrest said: “The ICO takes every complaint very seriously – in fact it doesn’t always take a complaint from an individual to trigger an investigation.
“This should serve as a forewarning to businesses, especially small ones, to take stock of their GDPR practices, as they could be financially crippled as a result of a breach.
“Beyond fines, businesses might face lawsuits from affected individuals, leading to further financial liabilities and legal expenses.”