The Information Commissioner's Office (ICO) said it planned to fine Emma's Diary £140,000 for selling information about its users illegally to data broker Experian for use by the Labour Party in its general election campaigning.
Emma's Diary, a company that offers advice to women and new parents, is facing a fine from the UK's data watchdog for selling people's personal information to the Labour party.
The Information Commissioner's Office (ICO) said it planned to fine Emma's Diary £140,000 for selling information about its users illegally to data broker Experian for Labour to use during its general election campaign.
Lifecycle, the company which owns Emma's Diary, has disputed the findings.
Emma's Diary bills itself as "one of the UK's leading baby clubs for mums-to-be, providing expert advice on every aspect of pregnancy and childcare." Its website states that Emma's Diary has a circulation of 870,000 a year.
Mums and parents-to-be who sign up with the site receive money-off vouchers for shops like Argos, and gift packs.
According to the ICO, Emma's Diary handed over more than 1 million records to Experian under a data supply agreement listing the Labour Party as Experian's client.
The records included:
The information was then supplied to Labour for targeted marketing, and to send political ads to people with young children for 106 parliamentary seats, the ICO said.
Deputy information commissioner Steve Wood told the Guardian on Tuesday that the ICO had, "really significant concerns about how Emma’s Diary was gathering the data, particularly involving mothers who were in hospital."
The ICO said Lifecycle hadn't made it clear enough that users' information would be sold on for political purposes.
A Labour spokeswoman said it would review its approach to buying information:
"We welcome the ICO’s report. The Labour Party holds data from a variety of sources, like all UK political parties. We have neither bought nor used Emma’s Diary data since the 2017 general election and we will be reviewing our approach to acquiring data from third parties in light of the ICO’s report. The Party has worked hard to bring into place a whole raft of new approaches to how we manage and process the data we hold to ensure compliance with GDPR and the new legal framework."
Lifecycle claims that Experian deleted the data from the Labour Party database after 8 June 2017.
A Lifecycle spokesman told Business Insider:
"We are deeply disappointed by the ICO’s decision to publish a report including details of enforcement action intended to be taken against Lifecycle Marketing. It is irregular for the ICO to publish details of intended enforcement action in this way before the process is complete.
We were not given an opportunity to respond to the detail of the ICO’s intended enforcement action prior to the report being published. As a result, details of the ICO’s findings, including those being reported by the press, contain significant factual inaccuracies which we trust will be corrected.
We look forward to working with the ICO on its ongoing investigation and will be submitting our written representations to challenge the ICO’s findings in accordance with the usual process."
The spokesman declined to give further detail about the factual inaccuracies.