Experian in ICO sights as Emma's Diary gets walloped

The Information Commissioner’s Office has sent out a chilling warning with confirmation it has fined Emma’s Diary the £140,000 monetary penalty it flagged up last month, for a serious breach of the first principle of the Data Protection Act 1998.
Emma’s Diary – a division of Lifecycle Marketing – provides advice on pregnancy and childcare. However, it sold the information to Experian Marketing Services specifically for use by the Labour Party.
Experian then created a database which the party used to profile the new mums in the run up to the 2017 General Election.
The Labour Party was then able to send targeted direct mail to mums living in areas with marginal seats about its intention to protect Sure Start Children’s centres.
The ICO investigation found that Emma’s Diary’s privacy policy did not disclose that the personal information given would be used for political marketing or by political parties. This is a breach of the Data Protection Act 1998.
Lifecyle Marketing did fight the action but “representations from the company” were dismissed, the ICO said.
Information Commissioner Elizabeth Denham said: “The relationship between data brokers, political parties and campaigns is complex. Even though this company was not directly involved in political campaigning, the democratic process must be transparent.”
This case formed part of the ICO’s comprehensive investigation into data analytics for political purposes. The ICO announced its intention to fine Emma’s Diary when it published its interim investigation report on July 11.
The partner policy report, Democracy Disrupted? Personal information and political influence , sets out how the ICO aims to stop personal data being used incorrectly in campaigns during future elections.
Denham continued:“All organisations involved in political campaigning must use personal information in ways that are transparent, lawful and understood by the UK public.”
The ICO has put the UK’s 11 main political parties on notice to have their data-sharing practices audited later this year. The ICO also has outstanding enquiries with a number of data brokers, including Experian.
Denham added:“The ICO is committed to monitoring data brokers, political parties and online platforms and using new audit and enforcement powers so that the public can have confidence that parties and political campaign groups are complying with the law.”