First UK GDPR enforcement action is against Canadian firm with apparently no EU presence
On 24 October 2018, the UK data protection enforcement body, the Information Commissioner’s Office (ICO), issued an Enforcement Notice against Canadian data services firm, AggregateI Q (AIQ). This was the first Enforcement Notice issued by the ICO under the General Data Protection Regulation (GDPR).
Source: First UK GDPR enforcement action is against Canadian firm with apparently no EU presence