ICO fines online pharmacy £130,000 for selling patient data

Pharmacy 2U offered more than 100,000 people's records for sale, including names, addresses and medical data

The UK's data watchdog has fined an online pharmacy 130,000 for selling its customers' details to marketers.

Initially uncovered by a Daily Mail investigation, Pharmacy 2U was found to have more than 100,000 people's personal information up for sale, with 20,000 confirmed as sold.

The data included customers' names and addresses, as well as medical conditions such as Parkinson's Disease, erectile dysfunction and asthma, with records sold in bulk, costing 130 for 1,000.

The Information Commissioner's Office (ICO) fined the company 130,000 for breaking the first rule of the Data Protection Act, which deals with fair use of data.

David Smith, ICO Deputy Commissioner said in a statement: "Patient confidentiality is drummed into pharmacists. It is inconceivable that a business in this sector could believe these actions were acceptable. Put simply, a reputable company has made a serious error of judgement, and today faces the consequences of that.

"It should send out a clear message to other companies that the customer data they hold is not theirs to do with as they wish."

In at least two instances of sold records, the purchasers were associated with some kind of regulatory sanctions, with one cautioned for misleading advertising, whilethe ICO said that one lottery firm appeared to target "elderly and vulnerable individuals".

The watchdog warned that sold personal data can be passed on repeatedly after the initial sale, spreading their details far and wide.

"Once people's personal information has been sold on once in this way, we often see it then get sold on again and again," Smith said. "People are left wondering why so many companies are contacting them and how they come to be in receipt of their details."

Featured Resources

Unlocking collaboration: Making software work better together

How to improve collaboration and agility with the right tech

Download now

Four steps to field service excellence

How to thrive in the experience economy

Download now

Six things a developer should know about Postgres

Why enterprises are choosing PostgreSQL

Download now

The path to CX excellence for B2B services

The four stages to thrive in the experience economy

Download now

Recommended

The definitive guide to IT security
Whitepaper

The definitive guide to IT security

9 Apr 2021
Ubiquiti insider says the company downplayed the severity of a major breach
data breaches

Ubiquiti insider says the company downplayed the severity of a major breach

31 Mar 2021
Forex broker FBS leaves millions of customer records exposed
data breaches

Forex broker FBS leaves millions of customer records exposed

25 Mar 2021
Performance benchmark: PostgreSQL/ MongoDB
Whitepaper

Performance benchmark: PostgreSQL/ MongoDB

22 Mar 2021

Most Popular

Microsoft is submerging servers in boiling liquid to prevent Teams outages
data centres

Microsoft is submerging servers in boiling liquid to prevent Teams outages

7 Apr 2021
Hackers are using fake messages to break into WhatsApp accounts
instant messaging (IM)

Hackers are using fake messages to break into WhatsApp accounts

8 Apr 2021
How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

8 Apr 2021