Skip to main content

2025 UK ICO GDPR enforcement actions

33 UK ICO actions published in 2025, 12 of them monetary penalties totalling £21,681,283. Each row links to the original ICO notice.

33
Actions
12
Monetary penalties
£21,681,283
Total fines

All actions published in 2025

DateOrganisationActionFineSectorSource
16 Dec 2025Staines Health GroupReprimand—HealthICO notice
12 Dec 2025Police Service of ScotlandReprimand—Monetary penalties, Criminal justiceICO notice
11 Dec 2025ZMLUK LimitedMonetary penalty£105,000MarketingICO notice
2 Dec 2025Post Office LimitedReprimand——ICO notice
20 Nov 2025LastPass UK LtdMonetary penalty£1,228,283Online technology and telecomsICO notice
6 Nov 2025Lead Pronto LtdMonetary penalty—MarketingICO notice
6 Nov 2025Lead Pronto LtdEnforcement notice—MarketingICO notice
15 Oct 2025Capita plc and Capita Pension Solutions LtdMonetary penalty£14,000,000—ICO notice
9 Oct 2025South Wales PoliceEnforcement notice—Criminal justiceICO notice
8 Oct 2025Qonain HussainProsecution——ICO notice
16 Sept 2025Bharat Singh ChandMonetary penalty£200,000—ICO notice
16 Sept 2025Bharat Singh ChandEnforcement notice——ICO notice
3 Sept 2025Jason BlakeProsecution—HealthICO notice
28 Aug 2025Green Spark Energy LtdMonetary penalty£250,000UtilitiesICO notice
28 Aug 2025Green Spark Energy LtdEnforcement notice—UtilitiesICO notice
28 Aug 2025Home Improvement Marketing LtdMonetary penalty£300,000UtilitiesICO notice
28 Aug 2025Home Improvement Marketing LtdEnforcement notice—UtilitiesICO notice
27 Aug 2025Bristol City CouncilEnforcement notice—Local governmentICO notice
24 Jun 2025BirthlinkMonetary penalty£18,000Charitable and voluntaryICO notice
6 Jun 2025South Yorkshire PoliceReprimand—Criminal justiceICO notice
5 Jun 202523andMeMonetary penalty£2,310,000General businessICO notice
16 May 2025London Borough of Hammersmith and FulhamReprimand—Local governmentICO notice
15 May 2025Greater Manchester PoliceReprimand—Criminal justiceICO notice
24 Apr 2025Darian Bishop trading as ECO4UEnforcement notice—General businessICO notice
24 Apr 2025Darian Bishop trading as ECO4UMonetary penalty£50,000General businessICO notice
14 Apr 2025DPP Law LtdMonetary penalty£60,000General businessICO notice
27 Mar 2025AFK Letters Co LtdMonetary penalty£90,000General businessICO notice
27 Mar 2025AFK Letters Co LtdEnforcement notice——ICO notice
26 Mar 2025Advanced Computer Software Group LimitedMonetary penalty£3,070,000General businessICO notice
14 Mar 2025Greater Manchester PoliceReprimand—Criminal justiceICO notice
19 Feb 2025Smart Home Ensured LimitedEnforcement notice—Finance insurance and creditICO notice
4 Feb 2025Glasgow City CouncilReprimand—Local governmentICO notice
3 Feb 2025City of Edinburgh CouncilReprimand—Local governmentICO notice

Source: ICO (Information Commissioner's Office) — Enforcement action. Contains public sector information licensed under the Open Government Licence v3.0. Showing 150 of 210 published actions, retrieved 2026-06-18. Figures are historical ICO outcomes presented neutrally and are not legal advice.

Other years

2026 (13)2024 (52)2023 (52)

FAQ

How many ICO enforcement actions were published in 2025?
This dataset records 33 UK ICO enforcement actions published in 2025, of which 12 were monetary penalties totalling £21,681,283. The remaining actions were reprimands, enforcement notices or prosecutions, which carry no ICO fine.
What were the total ICO fines in 2025?
Monetary penalties published by the ICO in 2025 in this dataset total £21,681,283. Figures are taken directly from published ICO Monetary Penalty Notices and exclude reprimands, enforcement notices and prosecutions, which carry no fine.

Stay off the ICO's enforcement list

GeraCompliance's fixed-scope GDPR sprint maps your data flows, finds your gaps against the same articles cited in these notices, and gives you a prioritised remediation plan — in days, not months.

Book the GDPR SprintGDPR overview