Changeflow GovPing Data Privacy & Cybersecurity ICO fines TMAC Ltd £100,000 for PECR breaches
Urgent Enforcement Amended Final

ICO fines TMAC Ltd £100,000 for PECR breaches

Favicon for ico.org.uk ICO Enforcement
Filed February 3rd, 2026
Detected March 26th, 2026
Email

Summary

The UK's Information Commissioner's Office (ICO) has fined TMAC Ltd £100,000 for breaches of the Privacy and Electronic Communications Regulations (PECR). The company made over 260,000 unsolicited marketing calls to individuals registered on the Telephone Preference Service and failed to provide required caller information.

What changed

The ICO has issued a £100,000 monetary penalty and an enforcement notice against TMAC Ltd for violating PECR regulations. Specifically, TMAC contravened regulations 21 and 24 by making 260,332 unsolicited direct marketing calls to numbers listed on the Telephone Preference Service between February and September 2024. Furthermore, the company failed to provide recipients with the required caller particulars as mandated by regulation 24.

This enforcement action highlights the ICO's commitment to enforcing PECR. TMAC Ltd must cease these unlawful marketing practices and ensure full compliance with all PECR requirements moving forward. Failure to comply with the enforcement notice could lead to further sanctions. The penalty underscores the importance of respecting subscriber preferences and providing clear caller identification for direct marketing activities.

What to do next

  1. Cease unsolicited marketing calls to TPS-registered numbers.
  2. Ensure all direct marketing calls provide required caller particulars.
  3. Review and update direct marketing practices to comply with PECR.

Penalties

£100,000 monetary penalty

Source document (simplified)

TMAC Ltd

  • Date 3 February 2026
  • Type Enforcement notices
  • Sector General business TMAC contravened regulations 21 and 24 of PECR and the ICO issued a monetary penalty of £100,000 and an enforcement notice.

Between 8 February 2024 and 24 September 2024, TMAC used a public telecommunications service for the purposes of making 260,332 unsolicited calls for direct marketing purposes to subscribers where the number allocated to the subscriber in respect of the called line was a number listed on the register of numbers kept by the Commissioner in accordance with regulation 26, contrary to regulation 21(1)(b) of PECR.

TMAC also failed, as required by regulation 24 of PECR, to provide the recipient of the calls with the particulars specified at regulation 24(2) of PECR.

Named provisions

Regulation 21 Regulation 24

Source

Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
ICO
Filed
February 3rd, 2026
Instrument
Enforcement
Legal weight
Binding
Stage
Final
Change scope
Substantive
Document ID
ICO Enforcement

Who this affects

Applies to
Employers
Industry sector
4231 Wholesale Trade
Activity scope
Direct Marketing Calls
Geographic scope
United Kingdom GB

Taxonomy

Primary area
Consumer Protection
Operational domain
Compliance
Topics
Data Privacy Telecommunications

Get Data Privacy & Cybersecurity alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when ICO Enforcement publishes new changes.

Free. Unsubscribe anytime.