United Kingdom: Information Commissioner's Office investigation into Capita plc and Capita Pension Solutions Limited over data security breaches

Progress

Current status
in force
15 Oct 2025 in force
10 Oct 2025 under investigation
03 Apr 2025 under investigation

Scope

Implementers
United Kingdom
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
other service provider
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

15 Oct 2025
in force

Information Commissioner’s Office fined Capita GBP 14 million over data security breaches

On 15 October 2025, the UK Information Commissioner's Office (ICO) imposed penalties totalling GBP 14 million on Capita, with Capita plc being fined GBP 8 million and Capita Pension Solutions Limited GBP 6 million for breaches of the UK's General Da…

Source
Event type investigation
Action type ruling
Government branch executive
Government body data protection authority
10 Oct 2025
under investigation

Information Commissioner’s Office reached settlement with Capita over data security breaches

On 10 October 2025, Capita plc and Capita Pension Solutions Limited entered into a settlement agreement with the Information Commissioner to resolve the investigation into the March 2023 cyber incident. The companies made full admissions regarding t…

Source
Event type investigation
Action type interim ruling
Government branch executive
Government body data protection authority
03 Apr 2025
under investigation

Information Commissioner’s Office issued Notice of Intent against Capita over data security breaches

On 3 April 2025, the Information Commissioner’s Office (ICO) issued a Notice of Intent to Capita plc and Capita Pension Solutions Limited proposing penalties of GBP 25 million and GBP 20 million, respectively, for provisional findings of the UK's Ge…

Source
Event type investigation
Action type interim ruling
Government branch executive
Government body data protection authority