United Kingdom

CAPITA PENSION SOLUTIONS LIMITED

6,880,000 €

GDPR enforcement action by Information Commissioner (ICO) on 2025-10-15.

Rank · Sector

#11

of 597 in Industry and Commerce

Rank · United Kingdom

of 28

Rank · All fines

#55

of 3,050

Case details

Authority: Information Commissioner (ICO)
Date: 2025-10-15
Controller / Processor: CAPITA PENSION SOLUTIONS LIMITED
Sector: Industry and Commerce
Quoted Articles: Art. 32 (1), (2) UK GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The UK DPA has imposed a fine of £ 6,000,000 (EUR 6,880,000) on CAPITA PENSION SOLUTIONS LIMITED. CAPITA PENSION SOLUTIONS LIMITED acts as the data processor for the CAPITA Group, which has suffered a cyber attack. The processor failed to implement adeqaute technical and organisational measures to ensure data security and also failed to adequatly react to the incident.

Open original source Links to the regulator's original publication or another source.