United Kingdom
Where regulatory precedent shapes global financial standards
Information Commissioner's Office·ICO
Enforcement profile
The ICO is a well-established authority that has signalled a more proportionate post-Brexit approach. It reduced several large provisional fines (British Airways originally faced £183M before reduction to £20M). ICO is particularly active on data breaches, PECR cookie compliance, and children's data. It publishes detailed enforcement guidance.
Notable enforcement decisions
Insufficient security measures led to breach exposing 400,000 customer records including payment data.
Failure to implement adequate security following acquisition of Starwood hotel group systems.
Processing personal data of children under 13 without parental consent.
Unlawful collection and use of facial recognition data of UK residents.
Active regulations
The Gothic clock tower at the north end of the Palace of Westminster — synonymous with London and British governance.
Enforcement data is based on publicly available decisions and may not reflect every action, appeal, reduction, or subsequent court ruling. Fine amounts are shown as reported at the time of the decision. This information is for intelligence purposes and does not constitute legal advice.