Reform UK Party Limited – Court Ruling (Spain, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A court ruled that Reform UK Party Limited did not respond to over 1,700 requests from individuals asking to stop their personal data from being processed. This lack of response was seen as a failure to comply with privacy laws. The case shows that political parties must take personal data requests seriously and respond in a timely manner.
What happened
Reform UK Party Limited failed to respond to personal data requests from 1,746 individuals within the required time frame.
Who was affected
The individuals who submitted requests to stop their personal data from being processed by Reform UK Party Limited were affected.
What the authority found
The court found that Reform UK Party Limited did not adequately respond to the requests, violating privacy regulations.
Why this matters
This ruling sets a precedent that political organizations must adhere to privacy laws just like any other business. It serves as a reminder for all organizations to prioritize timely responses to personal data requests.
GDPR Articles Cited
National Law Articles
Good Law Project Limited, a representative body, was mandated by 51 individuals to bring proceedings on their behalf under Article 80 UK GDPR. Reform UK Party Limited, the controller, is a registered political party and processed personal data in the context of its political activities. In the month before the UK general election of 4 July 2024, the representative body provided an online tool through which members of the public could send notices to major political parties. These notices included a request to stop processing personal data, an objection to processing under Articles 18 and 21 UK GDPR, a written notice under Schedule 1 DPA 2018 requiring the recipient not to process the sender’s personal data and a DSAR under Article 15 UK GDPR. More than 11,600 individuals used the tool. Of these, 1,746 individuals, including the data subjects represented in the claim, sent a notice to the controller between 5 June and 4 July 2024. The controller did not respond within one month. It neither provided a substantive response nor explained that it required additional time to respond. On 8 October 2024, the representative body sent a pre-action letter to the controller. Between 11 and 14 October 2024, the controller sent response emails stating that it had found no record of the recipients in its systems, except for the DSAR and cease-and-desist notice. The controller also stated that any election mailing may have been based on electoral roll data, which it claimed it was entitled to use and which was exempt from subject access. The representative body considered these responses insufficient. It wrote again to the controller on 24 October and 3 December 2024, but the controller did not reply. On 28 March 2025, the representative body issued a claim seeking compliance with the DSARs and compensation for non-material damage under Article 82 UK GDPR and Section 168 DPA 2018. The controller applied to strike out the claim or, alternatively, for summary judgement. The controlle
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Reform UK Party Limited in ES
This is the only recorded case for this entity in this jurisdiction.
Details
Ruling Date
19 June 2026
Authority
DPA EWHC
About this data
Cite as: Cookie Fines. Reform UK Party Limited - Spain (2026). Retrieved from cookiefines.eu
Last updated: