ICO levels first ever GDPR fine against AggregateIQ
The Information Commissioner’s Office (ICO) has surpassed out its first GDPR enforcement note, against Canadian business enterprise AggregateIQ (AIQ). Earlier this yr, the firm became accused of profiling voters the usage of information improperly received from Facebook, and has been related to numerous right-wing political organizations.
AggregateIQ now has 30 days to ‘audit, determine, put in force and record’ its records processing practises or face the maximum great of £17 million or 4 in line with cent of annual international turnover.
According to Cambridge Analytica (CA) whistleblower Chris Wylie, AIQ used algorithms from Facebook information held via CA to build software to goal Republican citizens inside the 2016 US election.
The enterprise additionally worked on behalf of pro-Brexit businesses Vote Leave (which paid AIQ nearly £2.7 million) and BeLeave for the duration of the Brexit referendum, in addition to Northern Ireland’s Democratic Unionist Party and Veterans for Britain. In general, the corporation made around £3.5 million from its anti-EU clients.
AIQ allegedly worked to profile and target voters in the course of the Brexit marketing campaign. The ICO told the BBC that, although the data used to accomplish that changed into accrued earlier than the GDPR got here into pressure on the twenty fifth of May, it became concerned approximately its ‘continued retention and processing’.
The ICO’s notice lists a number compliance breaches, such as processing without a lawful basis and failing to provide transparency facts to the people whom the statistics referred to.
Many links were drawn among AggregateIQ and Cambridge Analytica, although the Canadia company continues to deny them. A announcement on the house web page of its internet site (which traffic will see earlier than accomplishing any form of interactive component) reads:
‘AggregateIQ is a digital marketing, web and software improvement agency based totally in Canada. It is and has continually been a hundred% Canadian owned and operated. AggregateIQ has by no means been and is not a part of Cambridge Analytica or SCL. Aggregate IQ has never entered right into a contract with Cambridge Analytica. Chris Wylie has never been employed through AggregateIQ.
‘AggregateIQ works in complete compliance inside all prison and regulatory necessities in all jurisdictions where it operates. It has by no means knowingly been concerned in any illegal activity. All work AggregateIQ does for each consumer is kept cut loose every different customer.
‘AggregateIQ has in no way controlled, nor did we ever have get entry to to, any Facebook records or database allegedly received improperly with the aid of Cambridge Analytica.’