Studios MG Limited – €46,800 Fine (United Kingdom, 2020)

€46,800Information Commissioner's Office6 October 2020United Kingdom
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The UK's Information Commissioner's Office fined Studios MG Limited for sending marketing emails about surgical masks without consent. The company failed to show they had permission to email thousands of people, violating privacy rules. This case highlights the importance of obtaining clear consent before sending marketing emails.

What happened

Studios MG Limited sent marketing emails about surgical masks to thousands of people without their consent.

Who was affected

People who received unsolicited marketing emails from Studios MG Limited during the Covid-19 lockdown.

What the authority found

The Information Commissioner's Office found that Studios MG Limited violated privacy rules by sending emails without consent, as required under regulation 22 of PECR.

Why this matters

This case underscores the need for businesses to ensure they have explicit consent before sending marketing emails, especially when using contact lists from various sources. It serves as a reminder that even a single unsolicited email can lead to significant penalties.

National Law Articles

Regulation 22 PECR
Section 55A DPA98
Full Legal Summary
Detailed

Studios MG Limited (SMG), a London based ‘software design and build’ company, sent, at the beginning of the Covid19 related lockdown measures, an email advertising surgical masks and providing a link to a vendor’s website to at least one, but an estimate of 8000-9000 email addresses. Did SMG act in breach of regulation 22 PECR, and, if so, are the conditions for a monetary penalty under section 55 A of the Data Protection Act 1998 (DPA) met? The Commissioner finds that SMG contravened regulation 22 PECR. In confirming the contravention she emphasizes that emails were obtained from a variety of undefined resources, and that no efforts were made to obtain or demonstrate consent. In addition, the Commissioner notes in this context, had SMG deleted the relevant database as well as their platform provider account, following initiation of the Commissioner’s investigation, rendering an accurate determination of the number of affected individuals impossible. She considered whether the ‘soft opt-in’ exemption provided by regulation 22 (3) PECR was relevant, but denied this for SMG being a ‘software design and build consultancy’, i.e. a business without any evident relation to the sale of protective equipment. The Commissioner continues by examining the conditions for issuing a monetary penalty under section 55A DPA. In the context of confirming the necessary seriousness of the contravention she makes specific reference to the ‘Information Commissioner’s guidance about the issue of monetary penalties prepared and issued under section 55C(1) of the Data Protection Act 1998’ to support the fact that such qualified breach may be constituted even by a single traceable incident. In particular, she later elaborates, did the number of complaints not necessarily reflect the gravity of a potential breach, since most recipients could be expected not to go as far as making an official complaint but would rather just delete or ignore an unsolicited marketing email. With a view to

Related Enforcement Actions (0)

No other enforcement actions found for Studios MG Limited in UK

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

6 October 2020

Authority

Information Commissioner's Office

Fine Amount

€46,800

40,000 GBP

GDPRhub ID

gdprhub-2816

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Studios MG Limited - United Kingdom (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: