The U.K. Information Commissioner’s Office has fined pregnancy and parenting club Bounty UK 400,000 GBP for violations of the Data Protection Act 1998. An ICO investigation found Bounty illicitly shared 34.4 million records belonging to more than 14 million people. Bounty collected personal data through its website and app. The group shared the information with credit reference and marketing agencies; however, Bounty never properly informed data subjects it might use their information in such a manner. Users’ information was shared with companies such as Acxiom, Equifax, Indicia and Sky. ICO Director of Investigations Steve Eckersley said the agency had never seen as many personal records and individuals affected in any of its investigations into data brokers.
Full Story