The UK’s data protection watchdog has officially ordered the prominent Muslim charity Penny Appeal to cease bombarding members of the public with unsolicited promotional text messages during the holy month of Ramadan.
The Wakefield-based relief organization found itself in the crosshairs of the Information Commissioner’s Office (ICO) after dispatching more than 460,000 marketing text messages over a compressed ten-day period. According to regulatory findings, these communications were sent to approximately 52,000 individuals who had either never provided explicit consent to receive such messages or had explicitly opted out of receiving marketing correspondence from the charity.
The high-volume messaging campaign took place between April and May 2022, a critical fundraising window that coincides with the Islamic holy month of Ramadan. During this period, charities frequently intensify their appeals to secure vital donations, including the collection of Zakat—the mandatory act of giving a set percentage of one’s wealth to charity, which is one of the Five Pillars of Islam. Many of the texts deployed by Penny Appeal specifically targeted recipients with appeals to channel their obligatory Zakat contributions directly to the charity’s various domestic and international projects.
However, the aggressive marketing strategy quickly alienated a significant portion of the public. The deluge of messages triggered a total of 354 formal complaints lodged with both the ICO and Mobile UK’s dedicated Spam Reporting Service. Many complainants expressed deep frustration, reporting that their prior requests to opt out of the charity’s messaging lists were routinely ignored. Recipients frequently characterized the unsolicited communications as "intrusive" and "unwanted," disrupting their personal lives during a sacred and reflective time of year.
The Information Commissioner’s Office serves as the United Kingdom’s independent regulatory authority tasked with upholding information rights, ensuring public data privacy, and enforcing data protection laws. Empowered to safeguard citizens from corporate and organizational overreach, the ICO possesses a wide array of regulatory tools to alter the behavior of entities that improperly collect, handle, and retain personal data. These measures range from formal non-criminal enforcement notices and comprehensive audits to severe criminal prosecutions for persistent offenders.
Regulatory scrutiny involving Penny Appeal is not a recent development. The watchdog revealed that it has been actively engaging with the Wakefield charity since 2020, following an earlier wave of public complaints connected to a separate marketing campaign. In the wake of that initial intervention, representatives from Penny Appeal had formally committed to overhauling their data practices and improving overall compliance with domestic direct marketing regulations.
Despite these assurances and subsequent guidance provided by the regulator, further complaints submitted by the public indicated that the charity was continuing to breach the rules by dispatching what the ICO categorized as illegal marketing texts.
The regulatory body noted that even while a formal investigation into their ongoing practices was actively underway, Penny Appeal pressed ahead with additional spam messaging campaigns throughout Ramadan, compounding the issue and driving up the volume of public grievances. Consequently, the ICO escalated its response by issuing a formal Enforcement Notice, legally binding Penny Appeal to completely halt the transmission of direct marketing communications without explicit consent within a strict 30-day window.
Andy Curry, the Head of Investigations at the ICO, elaborated on the severity of the charity’s actions and the rationale behind the enforcement decision. He emphasized that Penny Appeal had flooded individuals with text messages while showing a total disregard for statutory consent requirements and the fundamental right of citizens to opt out of marketing databases. Calling the behavior entirely unacceptable, Curry reiterated the regulator’s commitment to taking decisive action to shield the public from unwanted commercial and charitable text campaigns.
Curry acknowledged that while the ICO had previously provided consultative advice and practical guidance to help the charity achieve legal compliance, the persistent disregard for the rules left authorities with no alternative but to enforce legal sanctions. He also stressed the broader context of charitable fundraising, noting that the regulator fully recognizes the critical importance of allowing charities to raise funds responsibly for good causes and vulnerable populations, while maintaining a supportive stance toward smaller organizations that may require assistance in navigating complex legal frameworks. At the same time, Curry underscored that ultimate responsibility rests with every organization engaging in direct marketing to ensure they possess valid, verifiable consent from every recipient.
In response to the enforcement action and the public outcry, a spokesperson for Penny Appeal issued a formal statement addressing the charity’s position and outlining steps moving forward. The spokesperson stated that the organization remains deeply committed to continuous improvement in its pursuit of the highest standards of governance. As part of this ongoing institutional journey, the charity has initiated and completed a comprehensive review of its internal data usage frameworks and compliance procedures, which includes an active, ongoing cleansing process of the databases it maintains.
The spokesperson concluded by affirming Penny Appeal’s dedication to maintaining a transparent and cooperative relationship with the ICO and other relevant statutory agencies, ensuring that the organization can continue to strengthen its operations in service of the vulnerable communities and populations it was established to support.