EU Regulation 2016/679 - Decision Register

ICO REGISTER / SECTOR/SECTOR NOT STATED

ICO enforcement: Sector not stated

Actions the ICO published without assigning a sector on the register entry.

35

Actions in this sector

16% of the register

1 of 20

Rank by volume

sectors on the register

12

Monetary penalties

7 with a published figure

£14,820,000

Penalties published

largest: Capita plc and Capita Pension Solutions Ltd

2022 to 2026

Span on the register

5 years

What the register shows for this sector

Sector not stated accounts for 35 of the 216 actions on the register (16%), which makes it the most heavily represented of the 20 sectors the ICO uses. The commonest action here is the enforcement notice, at 13 of 35 (37%). Most actions here name PECR 2003 (21 of 35). 21 were taken under PECR, the marketing and electronic-communications rules, which are counted separately from the UK GDPR throughout this register. 9 organisations appear more than once: Thermotech Wall and Loft Surveys Ltd (2), Jacksons Marketing Ltd (2), Bharat Singh Chand (2), Breathe Services Ltd (2).

01Largest penalties in Sector not stated

Ranked by the amount the ICO published
#OrganisationDateActionLawPenalty
1Capita plc and Capita Pension Solutions Ltd15 Oct 2025Monetary penaltyUK GDPR£14,000,000
2Thermotech Wall and Loft Surveys Ltd28 May 2026Monetary penaltyPECR 2003£240,000
3Bharat Singh Chand16 Sep 2025Monetary penaltyPECR 2003£200,000
4Jacksons Marketing Ltd12 Mar 2026Monetary penaltyPECR 2003£130,000
5Quick Tax Claims Limited15 Oct 2024Monetary penaltyNot stated£120,000
6Dr Telemarketing15 Feb 2024Monetary penaltyPECR 2003£100,000
7Fortis Insolvency Limited28 Jun 2023Monetary penaltyPECR 2003£30,000

By action type

  • Enforcement notice13 (37%)
  • Monetary penalty12 (34%)
  • Reprimand10 (29%)

By law

By year

02Every Sector not stated action

35 entries, newest first. 23 carry a page here.
OrganisationDateActionLawPenalty
Thermotech Wall and Loft Surveys Ltd28 May 2026Monetary penaltyPECR 2003£240,000
Thermotech Wall and Loft Surveys Ltd28 May 2026Enforcement noticePECR 2003-
Jacksons Marketing Ltd12 Mar 2026Monetary penaltyPECR 2003£130,000
Jacksons Marketing Ltd12 Mar 2026Enforcement noticePECR 2003-
Post Office Limited2 Dec 2025ReprimandUK GDPR-
Capita plc and Capita Pension Solutions Ltd15 Oct 2025Monetary penaltyUK GDPR£14,000,000
Bharat Singh Chand16 Sep 2025Enforcement noticePECR 2003-
Bharat Singh Chand16 Sep 2025Monetary penaltyPECR 2003£200,000
AFK Letters Co Ltd27 Mar 2025Enforcement noticePECR 2003-
Breathe Services Ltd12 Dec 2024Monetary penaltyPECR 2003-
Breathe Services Ltd12 Dec 2024Enforcement noticePECR 2003-
Quick Tax Claims Limited15 Oct 2024Monetary penaltyNot stated£120,000
Quick Tax Claims Limited15 Oct 2024Enforcement noticeNot stated-
Service Box Group Limited10 Oct 2024Enforcement noticePECR 2003-
Birmingham Children's Trust Community Interest Company18 Mar 2024ReprimandNot stated-
Penny Appeal1 Mar 2024Enforcement noticeNot stated-
Dr Telemarketing15 Feb 2024Enforcement noticePECR 2003-
Dr Telemarketing15 Feb 2024Monetary penaltyPECR 2003£100,000
Poxell Ltd16 Jan 2024Enforcement noticePECR 2003-
Poxell Ltd16 Jan 2024Monetary penaltyPECR 2003-
Skean Homes Ltd16 Jan 2024Enforcement noticePECR 2003-
Skean Homes Ltd16 Jan 2024Monetary penaltyPECR 2003-
Complete Marketing Services Ltd9 Nov 2023Monetary penaltyPECR 2003-
Outsource Strategies Ltd20 Oct 2023Monetary penaltyPECR 2003-
F12 Management Ltd21 Sep 2023Enforcement noticePECR 2003-
Fortis Insolvency Limited28 Jun 2023Monetary penaltyPECR 2003£30,000
Fortis Insolvency Limited28 Jun 2023Enforcement noticePECR 2003-
Virgin Media Limited20 Sep 2022ReprimandNot stated-
National Crime Agency6 Sep 2022ReprimandData Protection Act 2018-
Ministry of Justice26 Aug 2022ReprimandData Protection Act 2018-
Jackson Quinn19 Aug 2022ReprimandUK GDPR-
Grindr LLC26 Jul 2022ReprimandUK GDPR-
Allied Health Professionals29 Jun 2022ReprimandUK GDPR-
Bolton at Home7 Jun 2022ReprimandUK GDPR-
Warrington and Halton Hospitals NHS Foundation Trust17 May 2022ReprimandUK GDPR-

03Other sectors

Sector not stated

35

actions, £14,820,000 in penalties

Marketing

28

actions, £1,180,000 in penalties

Criminal justice

26

actions, £816,000 in penalties

General business

20

actions, £5,990,000 in penalties

Local government

20

actions

Finance, insurance and credit

19

actions, £410,000 in penalties

Health

15

actions

Central government

14

actions, £350,000 in penalties

Utilities

11

actions, £1,243,900 in penalties

Online technology and telecoms

7

actions, £28,648,373 in penalties

Retail and manufacture

5

actions, £140,000 in penalties

Charitable and voluntary

4

actions, £25,500 in penalties

Education and childcare

3

actions

Legal

2

actions

Transport and leisure

2

actions

Land or property services

1

action

Media

1

action

Political

1

action

Regulators

1

action

Social care

1

action

04Sector analysis elsewhere on the site

GDPR fines by industry

Which sectors draw the largest fines across the EEA and the UK, and the violations that drive them.

Violation types

Consent, security, transparency and transfers: what regulators actually penalise.

The full ICO register

All 216 published ICO enforcement actions, by year, sector and law.

Provenance and independence

Source: ICO enforcement register (ico.org.uk/action-weve-taken/enforcement/), as published on 4 September 2026. Contains public sector information licensed under the Open Government Licence v3.0.

GDPRFine.com is an independent tracker of ICO enforcement. It is not affiliated with, endorsed by or connected to the Information Commissioner's Office, and it uses no ICO branding. Where the ICO's own wording is reproduced it is quoted and attributed; everything else on these pages is our own summary of the published record.

The ICO's register held 222 entries on that date. 6 of them are prosecutions of named individuals, with ages and home towns in the ICO's own summary. This tracker indexes organisations, so those 6 are excluded and every count on these pages is out of 216. They remain on the ICO's own register.

An entry says what the Commissioner did on the date shown. It is not a statement about the organisation today, and the ICO can amend or remove a register entry at any time. Amounts and provisions are as published by the ICO; where the published notice does not state a figure or name a provision, these pages say so rather than filling the gap.

Register: ico.org.uk/action-weve-taken/enforcement/. Corrections: [email protected].

REGISTER UPDATED 2026-04-28