The Information Commissioner’s Office (ICO) has concluded investigations into a Bradford-based credit loan company after 285 complaints were made over unwarranted ‘nuisance’ text messages.<\/p>\n
Provident Personal Credit Ltd reportedly employed third party vendors to send 999,057 text messages to promote their services. The text messages were unwarranted as the recipients had not agreed to receive such correspondence for marketing purposes.
\n<\/p>\n
Unless an organisation obtains clear and direct consent from a recipient they are, by law, not permitted to “transmit, nor instigate the transmission of, unsolicited communications for the purposes of direct marketing by means of electronic mail”. <\/p>\n
The text messages were sent with the intention of promoting the company’s brand, Satsuma Loans<\/em>. However, in doing so, Provident breached Data Protection (DPA) and Privacy and Electronic Communications Regulations (PECR).<\/p>\n The ICO’s monetary penalty notice provides that consent must be “freely given, specific and informed indication signifying the individual’s agreement.” This was reportedly not obtained by Provident, and in the ICO’s investigations, the company could not prove they had any evidence of prior consent.<\/p>\n The 285 complaints were made over a 6-month period. Individuals received texts like the below:<\/p>\n Provident did not send these texts themselves; they paid a third-party vendor to do it for them, who then instructed their own third party vendors to send some of the texts.<\/p>\n During the six-month period, Money Gap Group Ltd<\/em> reportedly sent 868,393 of these texts, and Sandhurst Associates Ltd<\/em> sent the remaining 130,664. The texts promoted Provident’s services and provided a web link to direct them to Provident’s credit loan agreement website.<\/p>\n The ICO concluded their investigations and found that Provident had breached regulation 22 of PECR and were responsible for the 999,057 unsolicited communications. Although the company did not send these texts themselves, the ICO found that Provident paid third parties to send them, with the aim of promoting Provident, and to direct people to its website in order to obtain more customers.<\/p>\n The ICO therefore believes Provident is the sufficient instigator of the unsolicited messages.<\/p>\n As the instigator of these promotional text messages, it’s Provident’s responsibility to obtain consent. The ICO recognises that such consent was never obtained and the company knew, or ought to have reasonably known, that in instructing the third parties to send the mass messages they would be breaching PECR and DPA regulations.<\/p>\n Provident cannot shift responsibility to the third party and must undertake proper due diligence.<\/p>\n The \u00a380,000 fine was issued to encourage both Provident and others to comply with PECR regulations in seeking consent before sending out mass electronic correspondence. Methods of direct marketing must not be abused as no-one wants to constantly receive an abundance of adverts and promotions by text or email.<\/p>\n Steve Eckersley, heard of ICO’s enforcement department, thinks the warning is clear:<\/p>\nThe complaints<\/h3>\n
Breach of the regulations<\/h3>\n
\u00a380,000 fine<\/h3>\n