Security News > 2021 > June > Papa don't breach: UK data watchdog fines that other pizza place £10,000 over unsolicited marketing blitz

Pizza takeaway and delivery outfit Papa John's has been fined £10,000 by the UK's data watchdog for sending marketing fluff to punters without their say-so.

Following a year-long investigation, the Information Commissioner's Office found that the company had sent 168,022 "Nuisance marketing messages to its customers without the valid consent required by law."

In particular, the ICO found that Papa John's was relying on the "Soft opt-in" exemption to send marketing texts and emails.

The "Soft opt-in" exemption - for those unfamiliar with Regulation 22(3) PECR - means that organisations can send marketing messages by text and email to individuals whose details they've obtained in the course or negotiation of a sale, and in respect of similar products and services.

In May, American Express was fined £90,000 by the ICO after spamming people who opted out of its marketing emails with 4.1 million unwanted messages.

Me Ltd of St Albans £8,000 for sending 84,000 direct marketing emails without consent to people who had provided their personal data for contact-tracing purposes.

News URL

https://go.theregister.com/feed/www.theregister.com/2021/06/16/papa_johns_ico_fine/