Canadian data analytics firm AggregateIQ Data Services has become the first company to face a formal enforcement action by the U.K. Information Commissioner’s Office for violations of the EU General Data Protection Regulation and the U.K. Data Protection Act.

AggregateIQ Data Services (AIQ) is a controller, as defined by Article 4(7) of the GDPR and Section 6 of the Data Protection Act (DPA). In May 2017, the ICO announced a formal investigation “into the use of data analytics in political campaigning.”

Jaclyn Jaeger is a freelance contributor to Compliance Week after working for the company for 15 years. She writes on a wide variety of topics, including ethics and compliance, risk management, legal,...