AFK’s third-party data supplier was using consent statements which did not specifically name AFK when asking the public for consent to be called. Additionally, AFK’s own privacy policy only mentioned contact by email, and did not state that people would also receive phone calls.
Our investigation found that AFK failed to comply with Regulation 21 of the Privacy and Electronic Communications Regulations (PECR), which requires organisations to have clear, informed and specific consent before making unsolicited direct marketing calls.
Andy Curry, Interim Director of Enforcement and Investigations, said:
“AFK made calls to those registered with the Telephone Preference Service, and failed to keep proper records of consent for those it was calling as well as failing to properly disclose to people what they would be consenting to. This is a fundamental requirement of responsible and legally compliant direct marketing.
“This fine should serve as a clear warning to and learning for other organisations: if you cannot demonstrate valid consent for people on the Telephone Preference Service, you should not be contacting people. If people are being asked for consent to be contacted, it should be absolutely clear what this is for.
“It is vital that other companies utilising direct marketing have robust systems in place to protect people’s privacy and comply with the law.”