Re: Interesting dilemma
"Do you delete a database full of personal data when you are finished with it or hang on to it in case its needed as evidence at a later date?"
From the ICO:
The deletion of personal data is an important activity in data protection, given the fifth data protection principle’s requirement that “personal data processed for any purpose or purposes shall not
be kept for longer than is necessary for that purpose or those purposes”.
Unless the ICO issued a request to keep evidence in a timely manner (i.e. within 6 months of the complaints? Maybe less given the lifetime of the Brexit campaigning) I'm not sure how this should be complied with unless there are mandated requirements.
Given 20 complaints out of ~200,000 people, and given the nature of the Brexit campaign where some people will have been signed up maliciously, the fine seems extreme...