Sanction RGPD Information Commissioner (ICO) — CAPITA PLC : 9,2 M€ (2025)
- Autorité de contrôle
- Information Commissioner (ICO)
- Pays
- Royaume-Uni
- Entreprise / secteur
- CAPITA PLC
- Montant de l'amende
- 9,2 M€
- Date de la décision
- 15 octobre 2025
- Fondement juridique
- Art. 5 (1) f) UK, Art. 32 (1), (2) UK
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The UK DPA has imposed a fine of £ 8,000,000 (EUR 9,180,000) on CAPITA PLC. CAPITA PLC acts as the data controller for the CAPITA Group, which has suffered a cyber attack. The controller failed to implement adeqaute technical and organisational measures to ensure data security and also failed to adequatly react to the incident.