Information Commissioner's Office
ICO reaches agreement with Easylife Ltd
Update: This press release has been updated to reflect the fact that Easylife Ltd were fined for breaching the GDPR, as opposed to the Data Protection Act 2018
The Information Commissioner’s Office (ICO) has reached an agreement with Easylife Ltd (Easylife) to reduce the monetary penalty notice (MPN), issued for breaching the GDPR, to £250,000.
Easylife accepts the ICO’s findings set out in the MPN and has agreed to pay the reduced fine.
The ICO fined Easylife on 4 October 2022. This followed an investigation which found the company was making assumptions about customers’ medical conditions, based on their purchase history, to sell them further health related products.
The ICO found this involved the processing of special category data by Easylife, and the activity was being conducted without a lawful basis. Easylife has since stopped the unlawful processing of special category data.
Easylife appealed against the MPN. Both parties have now reached agreement that the MPN and the ICO’s factual findings stand, and the amount of the penalty should be reduced.
The First-tier Tribunal (General Regulatory Chamber) has approved the agreement reached by both parties and has otherwise dismissed the appeal.
“As a pragmatic and proportionate regulator, my role is to ensure that we protect the public and ensure businesses abide by the law.
“Easylife has confirmed that it has stopped the unlawful processing which formed the basis of the ICO’s concerns. Having considered the amount of the penalty again during the course of the litigation, in light of the issues raised by Easylife, I considered that a reduction was appropriate.”
- John Edwards, UK Information Commissioner
Easylife also received a separate £130,000 fine on 4 October 2022 for being responsible for over 1.3m unsolicited direct marketing calls, which is a breach of the Privacy and Electronic Communications Regulations (PECR). This penalty was not appealed and was paid in full.
Original article link: https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2023/03/ico-reaches-agreement-with-easylife-ltd/
Latest News from
Information Commissioner's Office
ICO issues reprimand to the Metropolitan Police Service for inadequate handling of files related to organised crime groups16/03/2023 16:10:00
ICO statement on Government response to Sir Patrick Vallance’s Pro-Innovation Regulation of Technologies Review16/03/2023 11:05:00
Yesterday, Wednesday 15 March, the Government has published its response to Sir Patrick Vallance’s Pro-Innovation Regulation of Technologies Review.
ICO shares resources to help designers embed data protection by default15/03/2023 09:10:00
The ICO has produced new guidance to help UX designers, product managers and software engineers embed data protection into their products and services from the start.
John Edwards, Information Commissioner, delivers a keynote speech at IAPP Data Protection Intensive UK.13/03/2023 15:10:00
The Commissioner recently (09 March 2023) opened the conference with an overview of our past year and how we've changed our approach to ensure we’re a more empathetic, open regulator.
ICO statement on re-introduction of Data Protection and Digital Information Bill08/03/2023 16:05:00
Today, Wednesday 8 March, the Data Protection and Digital Information (DPDI) Bill is due to be re-introduced to Parliament. The ICO has issued the following statement and a full press release from the Department of Science, Innovation and Technology can be viewed here.
The Lockdown Files will help us learn from the experience of Covid07/03/2023 16:20:00
A cold and increasingly unsettled weather pattern is now becoming established across the UK with cold air from the north having pushed south across the whole of the country, bringing snow, ice and low temperatures for many.
The Lockdown Files will help us learn from the experience of Covid07/03/2023 16:15:00
Following the Daily Telegraph's reporting of leaked WhatsApp messages sent by Ministers during the COVID-19 pandemic, Information Commissioner John Edwards set out his views on the importance of record keeping. This piece first appeared in print in the Daily Telegraph on Saturday 4 March.
ICO approves fourth UK GDPR certification scheme following sequence of success03/03/2023 16:05:00
The Information Commissioner’s Office has approved the fourth set of UK GDPR certification scheme criteria.
ICO and Australian Communications and Media Authority sign Memorandum of Understanding03/03/2023 12:20:00
The Information Commissioner’s Office (ICO) and the Australian Communications and Media Authority (ACMA) have signed a Memorandum of Understanding (MoU), which formalises their commitment to work together on protecting people from unwanted nuisance calls and spam messaging.