Companies are still breaching the GDPR and PECR, Our training can help you avoid fines like these….

The Privacy and Electronic Communications Regulations 2003 and the General Data Protection Regulations 2016 have been in place for many years yet companies are still being receiving significant monetary penalties for breaching them.

Recent examples include:

Birthlink
fined £18,000 for destroying personal records.

23andMe
Fined £2,310,000 for failing to implement appropriate data security measures to protect personal information of UK users

Darian Bishop trading as ECO4U
Fined £50,000 for making unsolicited direct marketing calls to subscribers who were registered with the TPS.

DPP Law Ltd
Fined £60,000 for GDPR infringements

AFK Letters Co Ltd
fined £90,000 for making unsolicited direct marketing calls

Advanced Computer Software Group Ltd
Fined £3,000,700 for data security failings

The Data Use and Access Act 2025 (DUAA) reforms how personal and non-personal data is managed.   The Act provides new opportunities for oganisations to use and share data more effectively. It makes several changes that aim to reduce the burden imposed under the GDPR and PECR.

NOW is the perfect time to refresh your knowledge of UK data protection and help avoid penalties like those above.  Our training is high quality and very affordable.