ICO (UK) · 15 October 2025
Capita plc
FineGBP14,000,000≈ €16,100,000Violation found
- Regulator
- ICO (UK)
- Decided
- 15 October 2025
- Country
- United Kingdom
- Sector
- Not given
- Regulator’s reference
- Capita plc and Capita Pension Solutions Ltd
- Fino case number
- 2025/GB/016
What happened
The DPA imposed a combined £14,000,000 fine on a business services provider and its processor, following a cyber attack which gave unauthorised parties access to over 6 million people’s data. The DPA found a lack of appropriate security measures.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
The source doesn’t list which GDPR articles were involved.
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/GB/016.