Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 06 MARCH 2020

UK ICO To Begin Formal Enforcement Action Against The Adtech Industry

Mayer Brown
Mayer Brown
Contributor
Mayer Brown

Mayer Brown

Mayer Brown is a leading international law firm positioned to represent the world’s major...

View firm profile
Explore more from Mayer Brown

In their June report, the ICO identified a number of concerns that they have with the adtech industry and the use of RTB.

United KingdomPrivacy
Charles-Albert Helleputte
Charles-Albert Helleputte
Diletta De Cicco
Diletta De Cicco
Guido Zeppenfeld
Guido Zeppenfeld
Mark Prinsley
Mark Prinsley
Oliver Yaros
Oliver Yaros
Dr. Ulrich Worm
Dr. Ulrich Worm
Author LinkedIn connections

In June 2019, the UK Information Commissioner's Office ("ICO") produced a report on the advertising industry's use of adtech and real time bidding ("RTB") and whether UK data protection and e-marketing legislation was being complied with. The report criticised parts of the sector for not doing enough to safeguard personal data, but stated that the ICO would give organisations a six-month grace period prior to taking regulatory action, during which time they would work with stakeholders in the industry to ensure that steps were being taken towards compliance.

On the 17 January 2020, in a blog by their Executive Director of Technology and Innovation, Simon McDougall1, the ICO stated that, whilst some stakeholders had engaged positively with them following the publication of June's report, overall the ICO were not satisfied that enough was being done by the industry and that, as a result of this, they would begin taking formal regulatory action. In this article, we

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Visit us at mayerbrown.com

Mayer Brown is a global services provider comprising associated legal practices that are separate entities, including Mayer Brown LLP (Illinois, USA), Mayer Brown International LLP (England & Wales), Mayer Brown (a Hong Kong partnership) and Tauil & Chequer Advogados (a Brazilian law partnership) and non-legal service providers, which provide consultancy services (collectively, the “Mayer Brown Practices”). The Mayer Brown Practices are established in various jurisdictions and may be a legal person or a partnership. PK Wong & Nair LLC (“PKWN”) is the constituent Singapore law practice of our licensed joint law venture in Singapore, Mayer Brown PK Wong & Nair Pte. Ltd. Details of the individual Mayer Brown Practices and PKWN can be found in the Legal Notices section of our website. “Mayer Brown” and the Mayer Brown logo are the trademarks of Mayer Brown.

© Copyright 2024. The Mayer Brown Practices. All rights reserved.

This Mayer Brown article provides information and comments on legal issues and developments of interest. The foregoing is not a comprehensive treatment of the subject matter covered and is not intended to provide legal advice. Readers should seek specific legal advice before taking any action with respect to the matters discussed herein.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Ten AI Giants, One Regulator And A Lesson For Everyone Else: What The ICO’s Foundation Model Report Really Tells Us

The UK's Information Commissioner's Office has completed its supervision of major AI foundation model developers, revealing significant gaps in data protection practices and setting new expectations for legitimate interests assessments, transparency, and special category data handling. The regulator has now turned its attention to agentic AI systems, warning that autonomy is not an excuse for poor compliance and launching a call for evidence that will shape future regulatory guidance.
United KingdomPrivacy
Burges Salmon LLP
Burges Salmon LLP
Article

To Fine Or Not To Fine: EDPB Confirms Default Position In GDPR Enforcement Should Be To Fine

The European Data Protection Board has published draft guidelines proposing a fundamental shift in GDPR enforcement: a presumption that fines should be imposed for non-minor infringements, with a deliberately low bar for establishing negligence. Organizations will need to demonstrate robust compliance programs and documented decision-making to potentially avoid penalties, as regulators move from asking "should we fine?" to "can we justify not fining?"
GlobalPrivacy
Crowell & Moring LLP
Crowell & Moring LLP
Article

ICO Cookie Crackdown 2.0: The ICO’s New Storage And Access Technologies Guidance

The UK Information Commissioner's Office has finalized its guidance on storage and access technologies, expanding compliance requirements beyond traditional cookies to include tracking pixels, device fingerprinting, and web storage. Organizations must now navigate stricter consent standards and three new narrow exceptions introduced by the Data (Use and Access) Act 2025, while facing significantly increased enforcement penalties of up to £17.5 million or 4% of annual worldwide turnover.
United KingdomPrivacy
ZwillGen
ZwillGen
Article

Private CCTV, Ring Doorbells And Police Investigations: Where Does UK GDPR Draw The Line?

Domestic surveillance technology has evolved from simple security cameras to sophisticated smart systems that may inadvertently create legal obligations for homeowners. When does a Ring doorbell or CCTV system transform an ordinary citizen into a data controller subject to UK GDPR, and what are the implications of millions of private cameras forming an unregulated surveillance network?
United KingdomPrivacy
HCR Law
HCR Law
Article

European Commission Press Release: EU AI Act Transparency Enforcement Starts This Sunday! Do You Know Who Your Chatbots Are? We Break Down The Commission’s Guidelines On Transparency Below

The European Commission has announced that EU AI Act transparency rules take effect August 2, 2026, requiring chatbots to identify themselves, deepfakes to be labeled, and AI-generated content to be marked. Organizations must assess whether their AI systems trigger disclosure, labeling, or content-marking requirements, with limited exceptions and penalties reaching €15 million or 3% of global turnover for noncompliance.
GlobalPrivacy
Seyfarth Shaw LLP
Seyfarth Shaw LLP
Article

DOL Announces Enforcement Actions Against Employers In H-1B And PERM Fraud Probe

The Trump Administration has launched an unprecedented enforcement action suspending permanent labor certification processing for eight major employers, linking immigration sponsorship to layoff histories and recruitment practices. This development signals a fundamental shift in how the government evaluates employer access to H-1B and green card programs, with investigations already underway and subpoenas served.
United StatesEmployment and HR
Mayer Brown
Mayer Brown
Article

Landmark DoorDash Settlement Confirms NYC DCWP’s Aggressive Enforcement Posture

New York City's Department of Consumer and Worker Protection secured a landmark $131.5 million settlement with DoorDash, marking the largest worker settlement in the city's history and the largest involving food delivery workers nationwide. The agreement provides over $115 million in direct compensation to more than 260,000 delivery workers who were underpaid, unpaid, or paid late, while establishing a comprehensive three-year compliance monitoring program.
United StatesEmployment and HR
Mayer Brown
Mayer Brown
Article

Trump Administration Announces New Enforcement Actions Against Employers In H-1B And PERM Fraud Probes

The Trump Administration has launched an unprecedented investigation into H-1B visa and PERM labor certification programs, with the Department of Labor's Office of Inspector General issuing dozens of subpoenas and suspending employers' ability to process applications. Federal agencies are deploying new enforcement tools including whistleblower programs and criminal prosecution threats...
United StatesImmigration
Mayer Brown
Mayer Brown
Article

EU’s CBAM Downstream Extension And Anti-Circumvention Amendments: The Road To Trilogue

The European Union's Carbon Border Adjustment Mechanism is undergoing critical legislative refinement as the Commission, Council, and Parliament have each established distinct positions on extending CBAM to downstream goods and strengthening anti-circumvention measures. With trilogue negotiations now underway and the first political trilogue scheduled for October 2026, significant divergences remain between the institutions on scope, exemptions, and enforcement mechanisms that will shape the final framework
European UnionEnvironment
Mayer Brown
Mayer Brown