The ICO has stepped up its enforcement by securing confiscation orders totalling almost £475,000 against individuals who profited from the unlawful sale of personal data, signalling a tougher approach to data misuse for financial gain.
While the action was aimed at employees rather than their employers, the cases raise important questions for organizations about governance, oversight, and responding to data incidents.