First notice served under GDPR!

The Information Commissioner's Office has served an enforcement notice on AggregateIQ Services Ltd (a Canadian company located outside the EU) using its powers under section 149 of the Data Protection Act 2018 (DPA 2018).

The notice is the first of its kind issued under the General Data Protection Regulation ((EU) 2016/679) (GDPR) and DPA 2018 regime.