UK ICO fines Capita group £14 million following cyber-related UK GDPR failures

The UK Information Commissioner’s Office (ICO) fined two Capita group entities  £14 million for UK GDPR breaches tied to cybersecurity failures. The cyber incidents in question revealed the personal data of millions of customers, including particularly sensitive details. Authorities noted the severe impact on users. 

This is one of the larger ICO cyber-related penalties, even after the initial £58 million fine was reduced following Capita’s settlement with the ICO, the company’s admission of breaches, agreement not to appeal, and other considerations. The decision signals strict enforcement of data protection standards, serving as a reminder that high expectations of cyber resilience are higher than ever.

‍