Another instance where an organisation collecting personal data has failed to obtain adequate consent to sell or share the personal information it has collected.
These cases are becoming more and more common so if you intend to use personal information for a purpose other for which it has been collected, make sure you obtain consent.
An online pharmacy that sold details of more than 20,000 customers to marketing companies has been fined £130,000. Pharmacy 2U offered the customer names and addresses for sale through an online marketing list company. Companies that bought the details included a health supplements company that has been cautioned for misleading advertising and an Australian lottery company subject to investigation by Trading Standards. The ICO investigation found that Pharmacy 2U had not informed its customers that it intended to sell their details, and that the customers had not given their consent for their personal data to be sold on. This was in breach of the Data Protection Act.