CANADIAN OUTFIT AggregateIQ, which was earlier this year accused of profiling voters using data improperly acquired from Facebook, has received the UK's first GDPR notice.
Issued by the Information Commissioner's Office (ICO), the notice gives AggregateIQ 30 days to "audit, assess, implement and document" its data processing practises or face the maximum GDPR fine of £17m, or four per cent of its annual global turnover.
According to Cambridge Analytica whistleblower Chris Wylie, AggregateIQ used algorithms from Facebook data held by CA to build software to target Republican voters in the 2016 US election.
The company also worked on behalf of pro-Brexit groups Vote Leave (which paid it nearly £2.7m) and BeLeave during the Brexit referendum, as well as Northern Ireland's Democratic Unionist Party and Veterans for Britain. In total, the company made around £3.5m from its anti-EU clients.
The ICO told the BBC that, although the data used to do so was gathered before GDPR came into force on the 25th May, it was concerned about its "continued retention and processing".
The ICO's notice lists a range of compliance breaches, including processing without a lawful basis and failing to provide transparency information to the individuals whom the data referred to.
Many links have been drawn between AggregateIQ and Cambridge Analytica, although the Canadia firm continues to deny them. A statement on the home page of its website (which visitors will see before reaching any sort of interactive portion) reads: "AggregateIQ is a digital advertising, web and software development company based in Canada.
"It is and has always been 100 per cent Canadian owned and operated. AggregateIQ has never been and is not a part of Cambridge Analytica or SCL. Aggregate IQ has never entered into a contract with Cambridge Analytica. Chris Wylie has never been employed by AggregateIQ.
"AggregateIQ has never managed, nor did we ever have access to, any Facebook data or database allegedly obtained improperly by Cambridge Analytica."
The company is appealing the ICO's decision. µ
What can a hacker hack if a hacker hacks hackers...
But we doubt people will be lining up to buy it
'Prolific' duo netted more than $100m in spree
But its library is lacking here in Blighty