Birthlink – €20,725 Fine (United Kingdom, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Birthlink, a Scottish charity, was fined £18,000 (about €20,725) for losing important personal records due to poor security measures. This incident illustrates the critical need for organizations to safeguard sensitive information effectively. It serves as a wake-up call for charities and nonprofits to enhance their data protection efforts.
What happened
Birthlink lost irreplaceable personal records because they did not implement sufficient security measures.
Who was affected
Individuals whose personal records were lost in the incident were affected.
What the authority found
The Information Commissioner's Office found that Birthlink failed to take adequate technical and organizational measures to protect personal data, violating GDPR standards.
Why this matters
This ruling underscores the importance of data security for charities and nonprofits. Organizations must ensure they have strong protections in place to avoid losing sensitive information and facing penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The UK DPA has imposed a fine of £ 18,000 (EUR 20,725) on Birthlink. The controller, a scottish registered charity, failed to implement sufficient technical and organisational measures to ensure data security, resulting in the loss of irreplaceable personal records.
Related Enforcement Actions (1)
Other enforcement actions involving Birthlink in UK
Details
Fine Date
24 June 2025
Authority
Information Commissioner's Office
Fine Amount
€20,725
About this data
Cite as: Cookie Fines. Birthlink - United Kingdom (2025). Retrieved from cookiefines.eu
Last updated: