Information Commissioner (ICO) · 4 October 2022
Easylife Ltd.
Insufficient legal basis for data processing
Fine€1,547,000Fine issued
- Regulator
- Information Commissioner (ICO)
- Decided
- 4 October 2022
- Country
- United Kingdom
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/GB/002
What happened
The UK DPA imposed a fine of 1,350,000 GBP on a catalogue retailer for violating Articles 9 and 13 GDPR by profiling special category (health) data of their customers based on their product purchases without acquiring consent or informing them about it.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(a)Read →
- Art. 6Lawfulness of processingRead →
- Art. 9Processing of special categories of personal dataRead →
- Art. 13Information to be provided where personal data are collected from the data subject13(1)(c)Read →
- Data principles
- Special categories
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/GB/002.