ICO Wins Appeal on DSG Retail's Data Protection Obligations

ICO Wins Appeal on DSG Retail's Data Protection Obligations

First seen 19 Feb 2026, 21:15 UTC ComputerweeklyIco.UkTheregisterScworld 24.3

Article Content

Browse articles
ThreatCluster

The Court of Appeal has ruled in favor of the Information Commissioner's Office (ICO) regarding DSG Retail's data protection responsibilities following a cyber attack that compromised the personal data of at least 14 million individuals. The ruling reinstates the ICO's interpretation of legal obligations for organizations to secure personal data, following a £500,000 fine issued to DSG in 2020 after the incident.

Timeline

2018-01-01
Major cyber attack on DSG Retail occurred
2020-01-01
ICO fined DSG £500,000 after cyber attack
2026-02-19
Court of Appeal rules in favor of ICO in appeal