ZMLUK fined £105k for sending 67m+ marketing emails without valid consent. The ICO rejected its ‘soft opt‑in’ defence, stressing that vague, bulk consent and third‑party data are no substitute for clear, informed, and specific opt‑ins. A sharp reminder that PECR compliance isn’t optional.
https://ico.org.uk/action-weve-taken/enforcement/2025/12/zmluk-limited/




