On 6 July 2018, the Information Commissioner's Office (ICO)
issued an enforcement notice against
AggregateIQ for failing to comply with the General Data Protection
Regulation 2016/679 (GDPR). The enforcement notice was issued as
part of the ICO's investigation into whether personal data was
misused by both sides during the Brexit referendum.
AggregateIQ
The terms of the enforcement notice require AggregateIQ to
"cease processing any personal data of UK or EU citizens
obtained from UK political organisations or otherwise for the
purposes of data analytics, political campaigning or any other
advertising purposes", within 30 days of the date of the
notice.
AggregateIQ contracted with UK political organisations to
receive personal data of UK individuals during the Brexit campaign.
In particular, AggregateIQ contracted with a number of pro-Brexit
groups, including Vote Leave, BeLeave, Veterans for Britain and the
DUP Vote to Leave campaign. AggregateIQ processed this
