Law and the GDPR

Ignorance of the law is no defence

BT has been fined £77,000 for sending nearly five million nuisance emails to customers without their permission. Gloucestershire Police fined £80,000 for sending bulk emails. The Bible Society fined £100,000, Yahoo fined £250,000, University of Greenwich fined £120,000, with more companies and organisations under investigation. Using customer data without permission is against the law.

Every small or large business that holds details of customers or enquiries, has a duty to protect that data and ask permission to retain that information. Brexit and leaving the EU in 2019 will not change that fact. More information for small businesses.

The law is very clear

The Privacy and Electronic Communications Act (PECA)  see our guide to the General Data Protection Regulation (GDPR) which applies to all businesses. If you are based in the UK you can make a complaint at It should be recognised that if after contacting a business,it does not take action, the first step is to write to the company. If, after 30 days they have not contacted you, then you can make your complaint.

If a company is based in a member state of the European Union, then a complaint can be filed at the local Data Protection Authority for that country.

Lets hope we will not be publishing your business name here for breaking the law.