بِسْمِ اللَّهِ الرَّحْمَٰنِ الرَّحِيمِ
16 Jumada al-Ula 1448 AH
Fajr: 04:36 Dhuhr: 11:58 Asr: 15:12 Maghrib: 18:02 Isha: 19:11
☪
فَاسْأَلُوا أَهْلَ الذِّكْرِ
Western Muslim Diaspora

UK Data Protection Regulator Orders Penny Appeal to Halt Unsolicited Ramadan Text Messages

By: Ammar Sabilarrohman • Sep 23, 2026 • 5 min read

The prominent Wakefield-based Muslim charity Penny Appeal has been formally ordered by the United Kingdom’s data protection regulator to immediately cease bombarding members of the public with unsolicited spam text messages urging financial donations during the holy month of Ramadan.

The Information Commissioner’s Office (ICO)—the independent public body tasked with upholding information rights and data privacy in the UK—stepped in following a sustained digital marketing campaign that saw hundreds of thousands of messages dispatched without proper legal basis. Between April and May 2022, as Muslims worldwide observed the holy month of Ramadan, Penny Appeal sent out more than 460,000 unsolicited marketing texts over a concentrated ten-day period.

These messages targeted approximately 52,000 individuals who had either never provided explicit consent to receive such communications or had clearly and formally opted out of receiving promotional material from the organization. Many of the texts sent during this aggressive fundraising push specifically attempted to encourage people to direct their obligatory Islamic almsgiving, known as Zakat, specifically to Penny Appeal’s various global relief funds.

Regulator warns Penny Appeal over mass Ramadan spam texts

The volume and persistence of the messages prompted widespread frustration among recipients, resulting in a total of 354 formal complaints submitted directly to the Information Commissioner’s Office and the Mobile UK Spam Reporting Service. Numerous complainants came forward to report that their explicit requests to opt out of the messaging lists were routinely ignored by the charity. Many individuals described the incoming texts as deeply "intrusive" and entirely "unwanted," pointing to an alarming disregard for personal communication boundaries during a sacred religious period meant for reflection and charity.

The ICO operates as the country’s leading authority dedicated to safeguarding information rights, ensuring that organizations collect, handle, and store personal data in strict compliance with the law. To enforce these standards, the regulatory body possesses a broad range of legal powers designed to alter the behavior of non-compliant entities, including the issuance of formal enforcement notices, non-criminal audits, and even criminal prosecutions where severe breaches occur.

Regulatory scrutiny surrounding Penny Appeal is far from a recent development. The data protection watchdog has maintained an active dialogue with the Wakefield-based charity since 2020, following an earlier wave of public complaints concerning a previous direct marketing campaign. Following those initial interventions and regulatory warnings, representatives from Penny Appeal previously gave commitments to the ICO that they would overhaul their operations and significantly improve their institutional compliance with direct marketing legislation.

Despite these assurances, subsequent complaints demonstrated that the charity had failed to resolve its underlying data compliance failures. Instead, it continued to dispatch what the regulatory authority formally classified as illegal marketing texts.

Regulator warns Penny Appeal over mass Ramadan spam texts

Elaborating on the timeline and the necessity of intervention, the ICO noted that even while an active investigation was underway, Penny Appeal proceeded to transmit further spam texts throughout the Ramadan period, thereby triggering an even higher volume of consumer grievances. Consequently, the regulator issued a formal Enforcement Notice, legally binding Penny Appeal to halt all unauthorized marketing communications without explicit consent within a strict 30-day window.

Andy Curry, the Head of Investigations at the ICO, emphasized the severity of the charity’s actions and explained the rationale behind the decision to take formal enforcement measures.

"Penny Appeal inundated people with text messages with no regard for their consent or their right to opt out," Curry stated. "This is unacceptable and we will act decisively to protect the public from unsolicited marketing texts. Despite providing advice and guidance to improve this charity’s compliance, we were left with no choice but to take enforcement action in order to protect the public."

At the same time, Curry acknowledged the vital role that charitable organizations play in society, particularly when mobilizing support for vulnerable populations during significant religious seasons. He noted that the regulatory body understands the importance of responsible fundraising and recognizes that smaller charities occasionally require guidance to navigate complex data protection laws.

Regulator warns Penny Appeal over mass Ramadan spam texts

"We know how important it is that charities are able to responsibly fundraise for good causes and help people in need, and we know many people wish to support them," Curry added. "We also appreciate that small charities may need a helping hand when it comes to understanding the law, and we are here to support them to get this right. But all organisations sending direct marketing messages are responsible for ensuring they have your consent. We want to reassure the public that we are here to help if you or your family are receiving unwanted spam or calls."

In response to the publication of the enforcement action and the findings of the investigation, a spokesperson for Penny Appeal issued a formal statement addressing the charity’s future regulatory stance and operational commitments.

The spokesperson stated that Penny Appeal remains dedicated to achieving continuous improvement in its efforts to foster the highest standards of organizational governance. As a fundamental component of this ongoing institutional journey, the charity has conducted a comprehensive, end-to-end review of its data usage policies and internal compliance procedures. This process has included the thorough and ongoing cleansing of the database systems holding personal information.

Furthermore, the spokesperson reiterated that the organization remains fully committed to maintaining a close, cooperative working relationship with the Information Commissioner’s Office and other relevant statutory agencies, ensuring that the charity is continually strengthened to effectively serve the vulnerable communities relying upon its humanitarian aid.

☪
Author / Editorial Team:

Ammar Sabilarrohman