BrewDog founder James Watt is facing complaints with the UK data privacy watchdog after emailing thousands of shareholders without clear consent, raising serious GDPR concerns. The controversy erupted when Watt, who sold the debt-laden brewer earlier this year, contacted former investors—dubbed “equity punks”—to offer them free stakes in his new venture, Second Best.
How the GDPR Breach Allegations Unfolded
In March, BrewDog’s brand, UK breweries, and 11 bars were sold to US firm Tilray for £33 million, rendering crowdfunding shares worthless. On Wednesday, Watt announced a plan to buy back control via Second Best, backed by 43,000 investors. He emailed shareholders offering the “exact same stake in Second Best that you once held in BrewDog, for free.”
Find Bleeding Edge Supplements at Scandalous Prices on iHerb.
Several recipients told the Guardian they did not know how Watt obtained their contact details. Marc Knox, a former equity punk, said he wrote to Second Best about his concerns and is prepared to file a formal complaint. The Information Commissioner’s Office (ICO) is now assessing the incident.
Comparing GDPR Compliance: BrewDog vs. Best Practices
| GDPR Requirement | BrewDog’s Actions | Best Practice |
|---|---|---|
| Explicit consent for data use | No evidence of opt-in for marketing | Obtain clear, affirmative consent |
| Lawful basis for processing | Claimed “legitimate interests” | Document and justify legal basis |
| Data source transparency | Not disclosed how data was obtained | Always disclose data origin |
| Right to erasure | No immediate opt-out offered | Provide easy unsubscribe or deletion |
Key Takeaways for Businesses and Shareholders
- Data privacy compliance is critical when contacting investors—even former ones.
- Using “legitimate interests” as a defense requires clear justification and transparency.
- Shareholders should report suspicious data use to the ICO immediately.
- Companies must maintain auditable records of data consent and sources.
What This Means for Equity Punks
If you received an unsolicited email from James Watt or Second Best, you have the right to ask how your data was obtained and request its deletion. The ICO can impose fines of up to 4% of global turnover for serious GDPR breaches.
FAQ
What is the GDPR complaint against BrewDog about?
Can the ICO fine BrewDog or James Watt?
What should I do if I received an unsolicited email from Second Best?
As the ICO assesses these complaints, the case underscores the importance of data privacy in shareholder communications. Whether you’re a business leader or an investor, understanding GDPR obligations is essential to avoid costly penalties and reputational damage.
Browse the Shop
Acacia frida deluxe solid wood bed frame |
Bedroom bench |
Bed chest drawers |
Lingerie dresser |
Frame base |
Mirror with jewelry storage |
30 Bathroom Vanity |
Memory foam queen mattress |
Mattresses for back pain |
Nightstand set of 2 |
Grand Goldman Shop |
Civil Lawyer
Deutschland Trikot WM 2026
