Court Smacks Down Appeal: GDPR Fines Get the Last Laugh!
The ICO celebrates a court ruling affirming its GDPR fine against Doorstep Dispensaree, setting a precedent for future cases. While GDPR fines have dwindled, the ICO remains vigilant, with private firms still in its sights. Public bodies, however, seem to have found a new favorite game: “Dodge the Fine”.

Hot Take:
Looks like the UK’s Information Commissioner’s Office (ICO) is taking a page from the grumpy grandparent playbook: “I don’t care who started it, I’m ending it!” With the Court of Appeal backing their play, Doorstep Dispensaree just learned the hard way that storing sensitive info like loose change under the couch cushion is a no-go. This ruling might just be the stern talking-to that keeps other companies from trying to weasel their way out of GDPR fines in the future. Meanwhile, the ICO’s penchant for giving public bodies a slap on the wrist rather than a full-on grounding means that private companies should brace themselves for stricter enforcement. But hey, at least someone’s keeping the popcorn industry afloat with all these appeals and rulings, right?
Key Points:
- The ICO welcomed a court ruling that dismissed an appeal against their GDPR fine on Doorstep Dispensaree.
- Doorstep Dispensaree’s fine was initially reduced from £275,000 to £92,000.
- The Court of Appeal emphasized that the burden of proof lies with the appellant during appeals.
- ICO fines for GDPR violations have decreased, with a stronger focus on nuisance marketing penalties.
- The ICO’s Public Sector Approach may soften penalties for public bodies but keep private sector in the spotlight.
