Published on Friday, January 11, 2019 - 14:13 by Peter Galdies
SCL Elections, the parent company of troubled Cambridge Analytica, has been fined £15,000 by the ICO for failing to fulfill a data subject access request from a US citizen.
The individual first requested copies of data held on him from the company in 2017 but was only provided with only basic information which including predictions of his political stance. In response to this he then requested further information and the data that was used to create this prediction. SCL Elections ignored the request. After he then complained to the ICO they demandedin May 2018 that the company comply. SCL Elections chose to challenge this order and maintained, incorrectly, that as the data subject was not a UK citizen he did not have a right to request data.
As well as the fine SCL Elections must respond to the original request and provide the full record to the data subject..
"Wherever you live in the world, if your data is being processed by a UK company, UK data protection laws apply." said Elizabeth Denham, Information Commissioner, “Organisations that handle personal data must respect people’s legal privacy rights. Where that does not happen and companies ignore ICO enforcement notices, we will take action.”