- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Saga Personal Finance Limited – €87,750 Fine (United Kingdom, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Saga Personal Finance Limited was fined for sending out millions of unsolicited marketing emails without proper consent. This is important because it shows that companies must ensure they have valid permission before contacting people. The fine emphasizes the need for businesses to check their marketing practices and consent processes.
What happened
Saga Personal Finance Limited sent 28,523,745 unsolicited marketing emails without obtaining valid consent.
Who was affected
Individuals who received unsolicited marketing emails from Saga Personal Finance Limited.
What the authority found
The Information Commissioner's Office found that Saga Personal Finance Limited breached regulations by failing to obtain valid consent for their email marketing.
Why this matters
This ruling highlights the serious consequences of neglecting consent in marketing practices. Other businesses should review their consent processes to avoid similar penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 10 March 2026.
Processing notes: articles corrected, national law identified, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The ICO received a number of complaints regarding unsolicited email marketing. These were sent on behalf of Saga Personal Finance Limited (hereafter 'SPF') by different partner companies, so it launched an investigation into SPF's data practices. The company is a subsidiary of Saga Group Limited, which received a similar fine on the same day for another subsidiary's direct marketing practices. First, it sent a letter to the Saga Group requesting information "including details of Saga Group's Partners/Affiliates, websites from which consent for marketing was obtained together with evidence of that consent, and a description of any due diligence carried out with respect to the data used by Saga Group". The company replied, informing the ICO that the marketing content was indeed sent out by partners on behalf of SPF "using a database of individuals who had opted in to receiving marketing materials from third parties either via the Partners' websites or via websites operated by their sub-contractors". No personal data was actually transferred from the company, but it exercised total control over the content to comply with FCA requirements. The targeting and recipients was nonetheless controlled by its partners. Then, the ICO reviewed whether the consent on which the email marketing was based was legitimately obtained. It found that SPF was not named on any of the privacy policies the users of different websites agreed to. Some consent statements did not even inform the individuals agreeing to them that they would receive any third party marketing. The ICO held that SPF was in breach of Regulation 22 PECR because it instigated the transmission of the 28,523,745 unsolicited direct marketing messages sent and failed to obtain valid consent from individuals who received them. The breach was serious and negligent, respectively due to the high number of emails sent and lack of steps taken by the company to prevent it. It stated that while SPF relied on 'indirect consent' f
Related Enforcement Actions (0)
No other enforcement actions found for Saga Personal Finance Limited in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
13 September 2021
Authority
Information Commissioner's Office
Fine Amount
€87,750
75,000 GBP
About this data
Cite as: Cookie Fines. Saga Personal Finance Limited - United Kingdom (2021). Retrieved from cookiefines.eu
Last updated: