Studios MG Limited – €46,800 Fine (United Kingdom, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The UK's Information Commissioner's Office fined Studios MG Limited for sending marketing emails about surgical masks without consent. The company failed to show they had permission to email thousands of people, violating privacy rules. This case highlights the importance of obtaining clear consent before sending marketing emails.
What happened
Studios MG Limited sent marketing emails about surgical masks to thousands of people without their consent.
Who was affected
People who received unsolicited marketing emails from Studios MG Limited during the Covid-19 lockdown.
What the authority found
The Information Commissioner's Office found that Studios MG Limited violated privacy rules by sending emails without consent, as required under regulation 22 of PECR.
Why this matters
This case underscores the need for businesses to ensure they have explicit consent before sending marketing emails, especially when using contact lists from various sources. It serves as a reminder that even a single unsolicited email can lead to significant penalties.
National Law Articles
Studios MG Limited (SMG), a London based ‘software design and build’ company, sent, at the beginning of the Covid19 related lockdown measures, an email advertising surgical masks and providing a link to a vendor’s website to at least one, but an estimate of 8000-9000 email addresses. Did SMG act in breach of regulation 22 PECR, and, if so, are the conditions for a monetary penalty under section 55 A of the Data Protection Act 1998 (DPA) met? The Commissioner finds that SMG contravened regulation 22 PECR. In confirming the contravention she emphasizes that emails were obtained from a variety of undefined resources, and that no efforts were made to obtain or demonstrate consent. In addition, the Commissioner notes in this context, had SMG deleted the relevant database as well as their platform provider account, following initiation of the Commissioner’s investigation, rendering an accurate determination of the number of affected individuals impossible. She considered whether the ‘soft opt-in’ exemption provided by regulation 22 (3) PECR was relevant, but denied this for SMG being a ‘software design and build consultancy’, i.e. a business without any evident relation to the sale of protective equipment. The Commissioner continues by examining the conditions for issuing a monetary penalty under section 55A DPA. In the context of confirming the necessary seriousness of the contravention she makes specific reference to the ‘Information Commissioner’s guidance about the issue of monetary penalties prepared and issued under section 55C(1) of the Data Protection Act 1998’ to support the fact that such qualified breach may be constituted even by a single traceable incident. In particular, she later elaborates, did the number of complaints not necessarily reflect the gravity of a potential breach, since most recipients could be expected not to go as far as making an official complaint but would rather just delete or ignore an unsolicited marketing email. With a view to
Related Enforcement Actions (0)
No other enforcement actions found for Studios MG Limited in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
6 October 2020
Authority
Information Commissioner's Office
Fine Amount
€46,800
40,000 GBP
GDPRhub ID
gdprhub-2816About this data
Cite as: Cookie Fines. Studios MG Limited - United Kingdom (2020). Retrieved from cookiefines.eu
Last updated: