James Watt, the founder of the brewer BrewDog, is currently the subject of complaints submitted to the UK’s data privacy watchdog. The issue stems from his recent, unexpected attempt to regain control of the company he sold earlier this year.
Watt announced his intention to buy back the business through a new venture named Second Best, claiming the support of 43,000 former investors, known as “equity punks.” However, several recipients of an email sent by Watt regarding this bid have raised concerns about how he obtained their personal contact information, sparking questions about a potential breach of the General Data Protection Regulation (GDPR).
The Information Commissioner’s Office (ICO) is now reviewing these complaints. While the regulator does not comment on individual cases, it holds the authority to issue fines or mandate changes to business practices if it determines that data protection laws were violated.
Addressing the allegations, Watt stated that he had acted appropriately. “A communication was sent to my fellow shareholders in BrewDog following legal advice, using lawfully obtained data, and in connection with their legitimate interests as shareholders,” he said, though he did not clarify the specific source of the contact data.
Former shareholder Marc Knox noted that he had received the email last Sunday, which led him to discuss the matter with others. “I wasn’t thinking about complaining but I talked to a friend, looked online and saw there were lots of people saying the same thing: ‘How has this joker got my details?’” he said. Knox has expressed readiness to escalate his concerns to the ICO.
Legal experts have highlighted the seriousness of the situation. Ravi Naik, legal director at AWO, a firm specializing in data protection, stated that while it is not yet confirmed that a privacy breach occurred, the circumstances warrant investigation. He emphasized that the key questions involve how the recipients were selected and whether the email campaign adhered to legal standards.
Representatives for Tilray, which acquired BrewDog, confirmed that they did not provide any shareholder data to Watt. A spokesperson for Tilray clarified that the records system remains under the control of BrewDog plc in administration. The company further stated that it has no involvement in or responsibility for Watt’s business activities through Second Best, adding that it did not authorize the use of any data for such communications. The company maintained that its own data practices strictly comply with GDPR.
