The United Kingdom’s data protection regulator has formally ordered the prominent Muslim charity Penny Appeal to immediately cease bombarding members of the public with unsolicited marketing text messages aimed at securing donations during the holy month of Ramadan.
The Wakefield-based relief organization found itself under intense scrutiny from the Information Commissioner’s Office (ICO) following a sustained, high-volume digital campaign that ran counter to UK data protection legislation. Between April and May 2022, during the peak of Ramadan—a period traditionally associated with intense charitable giving, reflection, and community support—Penny Appeal dispatched more than 460,000 promotional text messages over a rapid ten-day window.
According to regulatory findings, these digital communications were aggressively pushed out to approximately 52,000 individuals who had either never provided explicit consent to receive marketing material from the charity or had actively opted out of such outreach. A significant portion of the messaging specifically targeted the Muslim community’s religious obligations, repeatedly encouraging recipients to direct their Zakat—an obligatory form of almsgiving and one of the Five Pillars of Islam—exclusively to Penny Appeal’s various international aid and humanitarian projects.
The intrusive campaign quickly provoked widespread public frustration. In total, the ICO and Mobile UK’s dedicated Spam Reporting Service received 354 formal complaints from exasperated citizens. Many complainants reported that their explicit requests to unsubscribe or opt out of the database were routinely ignored by the charity’s automated systems. Others characterized the high frequency of the messages as deeply "intrusive" and "unwanted," pointing out the unwelcome nature of receiving commercial and charitable solicitations directly on their personal mobile devices, particularly regarding sensitive religious financial obligations.
The Information Commissioner’s Office operates as the UK’s independent statutory authority tasked with safeguarding information rights, upholding data privacy for individual citizens, and enforcing compliance with data protection laws. Armed with a broad mandate to regulate information rights, the ICO possesses the administrative authority to take decisive action against any organizations or private individuals who unlawfully collect, process, retain, or misuse personal information. Depending on the severity of the infraction, regulatory interventions can range from formal enforcement notices and non-compliant audits to severe criminal prosecutions.
The regulatory clash with Penny Appeal was not an isolated incident, but rather the escalation of a multi-year supervisory relationship. The ICO had previously been engaging with the charity since 2020 following an influx of similar public grievances regarding an earlier, separate marketing initiative. Following that initial regulatory intervention, representatives from Penny Appeal had formally committed to rectifying their internal operations and substantially improving their compliance frameworks concerning direct marketing laws.
However, despite these prior warnings and assurances, the subsequent wave of complaints lodged during the 2022 Ramadan season revealed that the charity was continuing to deploy what the regulator classified as illegal marketing texts.
In an official public statement regarding the enforcement action, the ICO noted the compounding nature of the violations: "While still under investigation, Penny Appeal sent further spam texts over Ramadan, which led to even more complaints. The ICO has now issued an Enforcement Notice, ordering Penny Appeal to stop sending marketing communications without consent within 30 days."
Andy Curry, the Head of Investigations at the ICO, elaborated on the severity of the charity’s conduct and the necessity of regulatory intervention. "Penny Appeal inundated people with text messages with no regard for their consent or their right to opt out," Curry stated. "This is unacceptable and we will act decisively to protect the public from unsolicited marketing texts. Despite providing advice and guidance to improve this charity’s compliance, we were left with no choice but to take enforcement action in order to protect the public."
At the same time, Curry acknowledged the delicate balance the regulator must strike when dealing with the non-profit sector, recognizing the vital role that charitable organizations play in society. "We know how important it is that charities are able to responsibly fundraise for good causes and help people in need, and we know many people wish to support them. We also appreciate that small charities may need a helping hand when it comes to understanding the law, and we are here to support them to get this right," he said.
Nevertheless, Curry firmly underscored that compliance remains non-negotiable for all entities operating within the UK jurisdiction. "All organisations sending direct marketing messages are responsible for ensuring they have your consent. We want to reassure the public that we are here to help if you or your family are receiving unwanted spam or calls," he added.
In direct response to the enforcement notice and the public findings released by the regulator, a spokesperson for Penny Appeal issued an official statement outlining the organization’s current stance and steps toward institutional reform.
"Penny Appeal remains committed to continuous improvement in seeking to foster the highest standards of governance," the spokesperson said. "As part of this journey, we have conducted a full review of our data use and data compliance processes and procedures including ongoing cleansing of the data we hold."
The charity’s representative concluded by emphasizing their ongoing cooperation with statutory authorities, reiterating that the organization remains fully dedicated to working closely alongside the ICO and other regulatory bodies as part of an institutional effort to strengthen the charity’s internal systems, ultimately ensuring it can better serve vulnerable communities around the world without compromising regulatory standards.