Enforcing jurisdiction
United Kingdom · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.
Privacy topics

DPA case Unite the Union – €42,120 Fine (United Kingdom, 2021)

€42,120Information Commissioner's Office25 October 2021United Kingdom
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Unite the Union was fined for making unsolicited marketing calls to people who had opted out. The UK's Information Commissioner's Office found that many of these calls were made to individuals who did not give consent, violating privacy regulations. This case serves as a warning to organizations about the importance of respecting people's choices regarding marketing communications.

What happened

Unite the Union made unsolicited marketing calls to individuals who had opted out of such communications.

Who was affected

Individuals who received unwanted marketing calls from Unite the Union despite opting out.

What the authority found

The Information Commissioner's Office determined that Unite violated privacy regulations by contacting individuals without their consent.

Why this matters

This fine emphasizes that organizations must respect opt-out requests for marketing communications. Businesses should ensure they have proper consent before contacting potential customers.

National Law Articles
AI-identified
Regulation 21 PECR
Section 55A DPA

Source checks

Secondary-source text retrieved.

Review needed — 18 October 2026.

Processing notes: articles corrected, national law identified, amount discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Information Commissioner (“Commissioner”) was tasked with determining whether the conduct of Unite the Union (“Unite”), in which it contacted various individuals to promote life insurance, constituted “direct marketing” in contravention of Regulation 21 of the Privacy and Electronic (EC Directive) Regulations 2003, as amended (“PECR”) and whether, if contravened, a monetary fine is warranted in terms of Section 55A of the Data Protection Act (“DPA”). The Commissioner’s office received a total of 27 complaints relating to unsolicited calls for the purpose of direct marketing made to individuals who maintained that they did not consent to such marketing and at least two complainants further complained that they explicitly opted out of such marketing directly to the call operator, yet still received further calls. Upon further investigation the Commissioner discovered that of the 726 853 calls which connected, 57 665 of these calls were to individuals registered with TPS for 28 days or longer. The Commissioner explains Regulation 21 PECR as not permitting a company “to make calls promoting a product or service to an individual who has a telephone number registered with the Telephone Preference Service Ltd (“TPS”)” unless that individual has “given their consent to that company to receive such calls”. The TPS is a company which maintains a register (on the Commissioner’s behalf), in terms of Regulation 26 of PECR, containing numbers of individuals who have indicated that they do not wish to receive direct marketing calls on those lines. In order to confirm that this matter fell within the scope of Regulation 21 PECR the Commissioner considered the definitions of: •“Direct marketing” as set out in Section 122(5) of the DPA 2018; •“Consent” in PECR as set out in Article 4(11) the General Data Protection Regulation 2016/679 (the “GDPR”) read with recital 32, 42 and 43 of the GDPR; and •“Individual” and “subscriber” in terms of Regulation 2(1) of PECR. The Commissioner

Related Enforcement Actions (0)

No other enforcement actions found for DPA case Unite the Union in UK

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

25 October 2021

Authority

Information Commissioner's Office

Fine Amount

€42,120

36,000 GBP

GDPRhub ID

gdprhub-4302

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. DPA case Unite the Union - United Kingdom (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: