On 15 October 2025, The Information Commissioner's Office (ICO) imposed a combined monetary penalty of £14 million on Capita plc and Capita Pension Solutions Limited (CPSL). This fine followed a significant cyber-attack in March 2023 that compromised the personal data of over 6.6 million individuals.

In our seventh episode of Privacy Unpacked, Matthew Buckwell (Senior Associate, UK) and Laura Goold (Associate, UK) examine what went wrong, the key lessons for organisations, and what this tells us about the ICO's approach to cybersecurity enforcement.

Tune in now for key insights to stay ahead of the curve!