posted 3 years ago
Selling personal data is a breach of the Data Protection Act 2018. According to article 2(1)(a) "(1)The GDPR, the applied GDPR and this Act protect individuals about the processing of personal data, in particular by (a)requiring personal data to be processed lawfully and fairly, based on the data subject’s consent or another specified basis,"
Ultimately, selling data needs the customers’ consent. .