Information Commissioner's Office
SCL Elections prosecuted for failing to comply with enforcement notice
SCL Elections Ltd, also known as Cambridge Analytica, has been fined £15,000 for failing to comply with an enforcement notice issued by the Information Commissioner's Office (ICO).
The company appeared at Hendon Magistrates' Court and pleaded guilty through its administrators to breaching s47 (1) of the Data Protection Act 1998.
The criminal prosecution related to the company's failure to respond to an enforcement notice issued in May 2018, which ordered the company to respond in full to a subject access request submitted by Professor David Carroll, a US-based academic.
As well as the fine, the court also ordered the company to pay £6,000 costs and a victim surcharge of £170.
Elizabeth Denham, Information Commissioner, said:
"This prosecution, the first against Cambridge Analytica, is a warning that there are consequences for ignoring the law.
"Wherever you live in the world, if your data is being processed by a UK company, UK data protection laws apply.
"Organisations that handle personal data must respect people's legal privacy rights. Where that does not happen and companies ignore ICO enforcement notices, we will take action."
The enforcement action is part of our investigation into data analytics for political purposes.
- Our investigation into Cambridge Analytica continues. We are currently working to analyse materials seized during the investigation.
- In pleading guilty, the company has accepted it should have responded fully to Professor Carroll's subject access request and the ICO's notice in the first place.
- Anyone who requests their personal information from a UK-based company or organisation is legally entitled to have that request answered, in full, under UK data protection law. This is called the right of subject access.
- Cambridge Analytica provided Professor Carroll with a spreadsheet of information it held about him when he made his original request on 10 January 2017. But it did not provide the decision making process used to create it.
- Where companies fail to meet their obligations, the ICO can issue an enforcement notice compelling them to do so. It's a criminal offence not to comply with it. SCL Elections Ltd has been successfully prosecuted for offences under section 47 (1) of the Data Protection Act 1998
- We have referred the company and its directors to the Insolvency Service.
Latest News from
Information Commissioner's Office
The ICO and the Financial Conduct Authority (FCA) sign updated Memorandum of Understanding19/02/2019 12:20:00
The ICO and the Financial Conduct Authority (FCA) have signed an updated Memorandum of Understanding.
Consultation – 'Openness by design' – our draft access to information strategy18/02/2019 09:10:00
Every year, more and more people ask us to independently review decisions made by public authorities about their requests for information under the Freedom of Information Act or the Environmental Information Regulations.
Blog: Advancing the adtech debate from a data protection perspective13/02/2019 09:10:00
Simon McDougall, Executive Director for Technology Policy and Innovation, invites adtech industry stakeholders to a fact-finding forum.
Housing developer fined for ignoring data request08/02/2019 16:20:00
Organisations have been reminded they could face a criminal prosecution if they fail to respect the public’s legal right to access their personal information.
Blog: Show you mean business by paying the Data Protection Fee08/02/2019 12:20:00
Paul Arnold, ICO Deputy Chief Executive explains to small businesses why they need to pay the data protection fee.
ICO to audit data protection practices at Leave.EU and Eldon Insurance after fining both companies for unlawful marketing messages01/02/2019 15:20:00
The Information Commissioner’s Office (ICO) has issued fines totalling £120,000 to an EU referendum campaign and an insurance company for serious breaches of electronic marketing laws and is set to review how both are complying with data protection laws.
Blog: ICO regulatory sandbox31/01/2019 13:20:00
In November the ICO published an analysis of the call for views on our proposed regulatory sandbox.
ICO celebrates the success of innovative data protection projects on Data Protection Day 201928/01/2019 15:20:00
Innovative data protection projects funded by the ICO are making a real difference to public trust and confidence in privacy issues.