Pregnancy club fined £400,000 for illegally sharing members’ data
A pregnancy club has been fined £400,000 for illegally sharing the personal information of more than 14 million people in an “unprecedented” case.
Bounty UK, which offers advice to new parents, unlawfully shared its members’ data with marketing agencies, the Information Commissioner’s Office (ICO) said.
It included information on “potentially vulnerable” new mothers and children and appears “to have been motivated by financial gain”, the regulator added.
“Bounty were not open or transparent to the millions of people that their personal data may be passed on to such large number of organisations,” said Steve Eckersley, ICO director of investigations.
Bounty collected information through its website and mobile apps, merchandise packs, and even from the hospital bedsides of new mothers.
The company was found to have breached the Data Protection Act 1998 by sharing around 34.4 million records with agencies including Acxiom, Equifax, Indicia and Sky, the ICO said.
They are the four largest organisations out of a total of 39 which Bounty passed its information on to.
Mr Eckersley added: “Such careless data sharing is likely to have caused distress to many people, since they did not know that their personal information was being shared multiple times with so many organisations, including information about their pregnancy status and their children.
“The number of personal records and people affected in this case is unprecedented in the history of the ICO’s investigations into data broking industry and organisations linked to this.”