Authority
ICO
Country
United Kingdom
Date Issued
June 23, 2025
Industry
Other
Summary
The ICO fined Scottish charity Birthlink £18,000 for unlawfully destroying approximately 4,800 personal records without proper legal basis, potentially destroying irreplaceable data that individuals had a right to access. The destruction violated data retention and data subject rights obligations under UK GDPR.
Violation Types
Data DisposalData Subject Rights
Articles Violated
Related Enforcement Actions
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate UK GDPR compliance before regulators come knocking.
Talk to an Expert