UK Group Claims Tracker

UK group claims work differently from US and Australian class actions: nobody is automatically included, and what limits you is the statutory limitation period rather than a claim deadline.

Cases we track

The one thing to understand about UK claims

England and Wales has no general opt-out class action regime for data protection claims. The Supreme Court in Lloyd v Google closed the door on representative actions seeking uniform "loss of control" damages without individualised assessment.

So unlike a US securities class action — where you are a class member automatically — UK group claims require you to actively instruct a law firm. Each claimant is an individual client, with claims managed collectively. Several firms typically run competing group actions over the same incident, and there is rarely one headline settlement covering everybody.

You do not need to have lost money

Under UK data protection law you can claim compensation for non-material damage — the distress, anxiety and loss of control over your personal data caused by the breach itself. Financial loss, where it exists, is claimed on top. This is a meaningfully more claimant-friendly position than Australia's, where the availability of damages for distress alone remains unsettled.

Limitation is your real deadline

  • England, Wales and Northern Ireland: six years from the date the cause of action accrued.
  • Scotland: three years. Substantially shorter, and the reason Scottish firms run separate claims.
There is no claim form and no administrator to chase you

Nothing arrives in the post telling you a window is closing. If you think you have a claim, the limitation clock is the only deadline, and it runs whether or not you know about it.

Frequently Asked Questions

Does a UK group claim cost anything?

Group data breach claims are normally run on no win, no fee. Ask for the success fee percentage in writing before signing, and check whether after-the-event insurance is required.

How much is a UK data breach claim worth?

There is no fixed tariff. Distress-only claims have typically resolved in the hundreds of pounds, sometimes into the low thousands where the data was especially sensitive. Documented financial loss is recovered on top.

Should I complain to the ICO as well?

You can, and it is free. The Information Commissioner's Office cannot award you compensation, but the regulatory record can support a civil claim.

How long do these take?

UK data breach group actions commonly take two to four years from instruction to resolution.

See every settlement you qualify for

Tell SettleScout which brands you use and it matches you with open settlements, estimates your payouts, and reminds you before every deadline.

Free to download. Premium plans available.

Informational only; not legal, financial or investment advice. Case details verified 2026-08-11 against court filings and public notices.

Get SettleScout — Check What You're Owed