ICO fines company for not registering with it and paying the fee, providing some initial guidance on ICO fines policy under GDPR and Data Protection Act 2018.
Noble Design and Build of Telford, Shropshire, which operates CCTV systems in buildings across Sheffield were fined £4,500 in total, ordered to pay costs of £364.08 and a victim surcharge of £170.00.
The company failed to comply with an Information Notice and failed to register with the ICO, even though they were contacted three times, by letter and by email. The company was prosecuted under the terms of the 1998 Data Protection Act because of when the offences took place (September 2017-January 2018). The new Data Protection Act 2018 came into force on the 25 May, and organisations that process personal data have a duty to pay a data protection fee unless they are exempt.
Although this gives us some guidance on ICO fines and enforcement under GDPR and Data Protection Act 2018, one should note the fines are expected to be higher under the two new pieces of legislation.
