UK Fines Security Firms For Illegal Direct Marketing

By Charles Rollet, Published on Jan 16, 2019

Two UK security firms have paid over $200,000 in fines for illegally making hundreds of thousands of calls to people registered on a government no-call list.

Some of the calls included dubious claims of local crime waves or “free” equipment with hefty installation prices, according to complaints reviewed by IPVM.

In this note, we examine:

  • Who Was Fined & Why
  • Complaints Reveal Spammy, Misleading Calls
  • Total Fines Paid
  • Why They Thought They'd Get Away with It
  • Response from Government + Firms
  • US Comparison
  • Shady Sales Tactics in Home Security
  • GDPR Context

Because the illegal activity took place before GDPR implementation, the new regulation played no role in this case. However, the fines are a reminder of the legal risks of direct marketing and the possibility of even stricter government enforcement/fines for violations occurring after the GDPR.

Case Background

According to the ICO, the UK government data regulator:

  • A.C.T. Response of Middlesbrough made 496,455 illegal direct marketing calls between January 2017 and February 2018

The calls were made to phone numbers registered with to Telephone Preference Service (TPS), a government registry which bans unsolicited marketing calls.

Neither firm screened the numbers they called up against the TPS registry before making the calls, a practice that is illegal in the UK.

Constant Spammy, Misleading Calls

The calls sparked a flood of complaints to the ICO. Some complaints mentioned that callers from SHS, in particular, made doubtful claims about crime waves and hefty install fees.

ACT Response Complaint:

image

SHS Complaints:

Total Fines Paid

ICO deemed these calls and the companies’ ignoring of hundreds of complaints a clear violation of the Privacy and Electronic Communications Regulations or PECR of 2003.

In October 2018, A.C.T. Response was fined £140,000 (~$180,000) and SHS was fined £80,000 (~$102,000).

By accepting the verdict and paying early, the firms ultimately paid a reduced fine of £112,000 ($143,000) and £64,000 ($82,000) respectively, the ICO confirmed to IPVM.

Both firms ceased all direct marketing calls once the ICO began its investigation, said the ICO.

Why They Thought They'd Get Away With It

A.C.T. Response used a variety of tactics to evade detection, the ICO stated, such as getting its sister company to actually make the calls and telling its cold callers how to deal with people on the TPS list.

According to the ICO, SHS did not use such "deliberate" evasion tactics, although it did find the firm "negligent" for ignoring publicly-available ICO guidance on direct marketing.

Response from ICO

The ICO released a statement about the two cases, warning other companies against such practices:

These fines should set alarm bells ringing and deter marketing companies across all sectors that are contacting people without their consent. It is a company’s responsibility to make sure that it has valid consent to make these calls. The TPS is there for a reason – to protect people’s privacy and ensure that marketing companies obey the law. Marketing companies failing to take the basic step of checking TPS can expect robust enforcement.

Response from Security Firms

IPVM contacted both firms about these fines asking specifically why they decided to rely so heavily on direct marketing, but received no response.

UK Direct Marketing Context

Getting fined for violating the TPS registry is not uncommon in the UK. Just 3 weeks after these fines, the ICO fined two other (non-security) firms for making over 1 million illegal calls to TPS subscribers. However, IPVM couldn't find such fines being applied to other UK security firms recently.

US Comparison

Direct marketing is also regulated by the government in the US, which has a similar list to TPS called the National Do Not Call Registry. Violators of the registry can technically be fined over $40,000 per call by the FTC.

Last spring, the FTC filed charges against Alliance Security Inc., a home security firm, for making "more than a million" unauthorized calls to people on the registry. The case is ongoing but has been temporarily halted due to the government shutdown.

Shady Sales Tactics Not New to Home Security 

In the UK, local authorities in Hampshire County have warned residents against cold calls from unspecified home alarm firms who could be gathering data or selling unnecessary systems. The BBC has also investigated one UK security firm whose salespeople made a number of false claims, including that they had police security clearance.

In the US, the FTC has warned that "Some Home Security Systems May Be Scams", stating that: 

They may use scare tactics. For example, they may talk about a rash of supposed burglaries in your neighborhood.

Direct Marketing and GDPR

Since the security firms’ direct marketing calls took place before GDPR implementation on May 25, 2018, this case was not tried with the new law in force.

However, the case is a good reminder that the GDPR Article 21 establishes a clear right for data subjects to object to direct marketing, stating:

Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

That means direct marketing violations taking place after May 25, if done on a particularly egregious scale, could reach the significantly higher monetary penalties levied by the GDPR – a maximum of 4% of annual revenue or 20 million euros ($23 million). That’s something any integrator considering direct marketing should take note of.

Comments (2) : Members only. Login. or Join.

Related Reports

Faked Convergint Fever Camera 'Expert' Marketing on Jun 16, 2020
Convergint touts they are "THERMAL CAMERA SOLUTION EXPERTS" while faking...
Anixter Runs Fake Coronavirus Marketing Using Shutterstock Watermarked Images on Jul 24, 2020
Coronavirus faked marketing is regrettably commonplace right now but Anixter...
False: Verkada: "If You Want To Remote View Your Cameras You Need To Punch Holes In Your Firewall" on Jul 31, 2020
Verkada falsely declared to “3,000+ customers”, “300 school districts”, and...
Temperature Screening Is Ineffective, Says US, UK, Canada, Israel, And Ireland Health Leaders on Aug 25, 2020
Health leaders around the world are increasingly speaking out about the...
Dahua Taunts Australian Government, Continues To Sell Illegal Fever Cameras on Aug 10, 2020
Dahua is effectively taunting the Australian government by continuing to sell...
UK Firm Markets False Fever Screening, Hikvision Disavows on Jun 30, 2020
A UK security firm falsely claimed its Hikvision-based thermal solution could...
Uniview Deep Learning Camera Tested on Jul 14, 2020
Uniview's intrusion analytics have performed poorly in our shootouts. Now,...
Verkada Falsely Claims "First Native Cloud-based Access Control and Video Security Solution" on Jun 18, 2020
Verkada's false claims continue, this time to be the first native cloud-based...
UK Government Says Fever Cameras "Unsuitable" on Jul 01, 2020
The UK government's medical device regulator, MHRA, told IPVM that...
Facial Recognition: Weak Sales, Anti Regulation, No Favorite, Says Security Integrators on Jul 07, 2020
While facial recognition has gained greater prominence, a new IPVM study of...
South Korea Bus Outdoor Temperature Screening Endangers Public on Aug 26, 2020
These $80,000+ South Korea bus stations have gained world-wide attention but...
Axis Exports To China Police Criticized By Amnesty International on Sep 21, 2020
Axis Communications and other EU surveillance providers are under fire from...
Dangerous Hikvision Fever Screening Marketing In Africa on Sep 15, 2020
A multi-national African Hikvision distributor is marketing dangerously...
WDR Cheat Sheet and Camera Tracking - 30 Manufacturers on Aug 26, 2020
Manufacturers are regularly cryptic about what WDR support they actually...
Door Fundamentals For Access Control Guide on Aug 24, 2020
Doors vary greatly in how difficult and costly it is to add electronic access...

Recent Reports

Avigilon Aggressive Trade-In Program Takes Aim At Competitors on Oct 20, 2020
Avigilon has launched one of the most aggressive trade-in programs the video...
Mexico Video Surveillance Market Overview 2020 on Oct 20, 2020
Despite being neighbors, there are key differences between the U.S. and...
Dahua Revenue Grows But Profits Down, Cause Unclear on Oct 20, 2020
While Dahua's overall revenue was up more than 12% in Q3 2020, a significant...
Illegal Hikvision Fever Screening Touted In Australia, Government Investigating, Temperature References Deleted on Oct 20, 2020
The Australian government told IPVM that they are investigating a Hikvision...
Panasonic Presents i-PRO Cameras and Video Analytics on Oct 19, 2020
Panasonic presented its i-PRO X-Series cameras and AI video analytics at the...
Augmented Reality (AR) Cameras From Hikvision and Dahua Examined on Oct 19, 2020
Hikvision, Dahua, and other China companies are marketing augmented reality...
18 TB Video Surveillance Drives (WD and Seagate) on Oct 19, 2020
Both Seagate and Western Digital recently announced 18TB hard drives...
Watrix Gait Recognition Profile on Oct 16, 2020
Watrix is the world's only gait recognition surveillance provider IPVM has...
Intel Presents Edge-to-Cloud Ecosystem for Video Analytics on Oct 16, 2020
Intel presented its processors and software toolkit for computer vision at...
Microsoft Azure Presents Live Video Analytics on Oct 15, 2020
Microsoft Azure presented its Live Video Analytics offering at the September...
Worst Manufacturer Technical Support 2020 on Oct 15, 2020
4 manufacturers stood out as providing the worst technical support to ~200...
Clorox Announces, Then Pulls, Fever Camera on Oct 15, 2020
For almost one week, Clorox was marketing fever cameras. The booming...
Faulty Hikvision Fever Cam Setup at Mexico City Basilica and Cathedral on Oct 14, 2020
Donated Hikvision fever cameras (claiming screening of 1,800 people/min. with...
Directory of 211 "Fever" Camera Suppliers on Oct 14, 2020
This directory provides a list of "Fever" scanning thermal camera providers...