First GDPR Enforcement is Followed by First GDPR Appeal

In what has been billed as the world’s first GDPR action, the UK regulator — the Information Commissioner’s Office (ICO) — quietly issued an enforcement notice against Canadian firm AggregateIQ Data Services Ltd (AIQ). It is a low-key affair. Although the enforcement notice was issued on 6 July 2018, the notice was not and has not been placed on the ICO’s enforcement action page.