ICO Direct Marketing Guidance – what’s it all about?
The Information Commissioner's Office (ICO), the UK's independent authority set up to uphold information rights in the public interest, published its new direct marketing guidance on Thursday 24 March.
The importance of the new guidance was underlined by the penalties associated with it; notably it has already been suggested by the Minister for intellectual property, Baroness Neville-Rolfe, that the guidance may be written into statute in order to give it teeth in the Courts, and the ICO has stated that it will consider using its enforcement powers, including the power to issue a maximum fine of £500,000 where an organisation either repeatedly ignores the guidance and the law or receives significant consumer complaints and objections to its marketing.
The new guidance focuses on explaining the rules on direct marketing set out in the Data Protection Act 1998 (DPA) and the EC Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR). Both the DPA and PECR both restrict the way organisations can carry out unsolicited direct marketing i.e. the marketing that is not requested by consumers.
"the communication (by whatever means) of any advertising or marketing material which is directed to particular individuals".
Direct Marketing covers the promotion of ideas, goals and objectives, for example the messages which might be promoted by charities as well as companies which are selling a product or service. However, there are different rules for different mediums of communication, and therefore companies must take this into account in producing their media messages, emails or post marketing. The rules on calls, texts and email are stricter than those relating to postal communications. A key focus of the guidance is around 'opt in' rules which organisations must follow when presenting marketing options to consumers.
Under the DPA, if an organisation knows the name of the person it is contacting for marketing purposes, it must comply with the principles set out in the legislation, which include a requirement to treat the personal data fairly and lawfully, meaning that the individual must know that their information could be used for marketing purposes. A person must also be aware of whether that data will be shared or sold on to third parties, something which will generally require that person's consent. The DPA also requires that where an organisation seeks these preferences from their clients that they are kept up to date, failure to do so could result in a breach. Importantly, Section 11 of the DPA also gives individuals the right to give, at any time, written notice to an organisation to stop (or not to begin) using their details for direct marketing. The organisation does not have to reply, but the guidance reiterates that it is good practice for it to respond to a consumer indicating that the marketing will stop.
The PECR specifically sets out more detailed privacy rules in relation to electronic communications, particularly where these are unsolicited. However, the ICO guidance is also clear that the PECR and DPA rules are designed to be complementary. The PECR will also apply to calls and texts which try to generate marketing, even if the first message or communication does not, in itself contain any such information. The ICO highlights that the PECR guidance is broader than that of the DPA in that even if the organisation does not know the name of the person it is contacting (i.e. personal data), the PECR will still apply.
The new ICO guidance goes into full detail and gives worked examples on the areas set out above, and is a must-read for organisations using direct marketing in the United Kingdom. A full link is included here.
This article was written by Sophie Langley-Evans. For more information please contact Sophie on +44 (0)20 7427 6412 or at Sophie.Langley-Evans@crsblaw.com
Data Protection: All roads lead back to the GDPR
Across the globe, jurisdictions continue to develop their data protection and privacy laws.
Music to our ears? Well, perhaps not for Apple.
A feud first began when the music streaming giant, Spotify, filed a complaint against music streaming provide rand competitor, Apple Inc.
Risk allocation in commercial leases: the High Court considers rent suspension, insurance and frustration arguments
Read our summary of the full judgement on the latest Covid arrears case.
Competition and Markets Authority announces review of the EU vertical agreements block exemption
The UK Competition and Markets Authority is reviewing the future application of the EU vertical agreements block exemption in the UK.
Playing Copycat – Why have M&S begun legal action against Aldi over Colin the Caterpillar?
M&S’s chocolate caterpillar was the first of its kind to land on our supermarket shelves, over 30 years ago.
Building Back Better: Future Gazing
What’s next for the hospitality industry post-pandemic?
Building Back Better: Re-examining your proposition
Why hospitality businesses should re-examine their proposition now
Building Back Better: Real Estate and Restructuring
How and why should hospitality businesses re-structure post pandemic?
Charles Russell Speechlys advises Fudco Partnership on sale to Exponent-backed Vibrant Foods
Fudco is a family-owned business selling South Asian ethnic foods in UK and Europe.
ESG – Searching for substance behind the acronym
ESG is an acronym much used but perhaps less understood.
Focus Antitrust - 21 April 2021
This week's competition update.
Burn After Redditting – Scottish Court of Session Lays Down Marker for Online Copyright Protection
Sky UK Ltd have successfully obtained interim protection from infringement of their broadcast rights through links posted on Reddit.
Darren Bailey quoted extensively on the legalities of the European Super League proposals
Darren considers the legal questions that exist around the introduction of a European Super League.
Charles Russell Speechlys advises shareholders of Modern Networks on sale to Horizon Capital
Modern Networks is a leading provider of IT support, broadband and telecoms managed services to the UK’s commercial property sector.
Paul Henty writes for New Law Journal on the often-painful experience of tackling rules of origin post-Brexit
Defining provenance post-Brexit: Paul Henty charts the often-painful experience of tackling rules of origin.
Focus Antitrust - 14 April 2021
This week's competition update.
Darren Bailey quoted by the Financial Times on the regulation of the sports betting industry
As the UK moves to a more regulated model, the US is throwing open the doors on the regulation of the sports betting industry.
Focus Antitrust - 7 April 2021
This week's competition update.
No ticket, no merger: Viagogo and StubHub are one step closer to merging but must satisfy the CMA’s conditions
The £3.2bn acquisition of online ticketing company Stubhub by one of its competitors, Viagogo is one step closer to being finalised.
Client alert: Construction under competition law spotlight
We outline the three investigations which have either recently concluded or are ongoing together with what this means for businesses.