Read an article recently regarding FlyBe, and their attempt to find out (from a list of unknown user data) who wanted to be contacted in the future with promotions, etc.
They sent an email to this list of unknown users to determine just that, but they were later given a penalty for spamming (£70K). It is only fair to say that they did this because of the impending changes with the new GDPR rules.
If this was a genuine attempt to ensure that the company remain within the remains of the law/GDPR rules, how else could they have gone about this? If we are talking millions of rows of user data that could bring in a large amount of business, would it have been better for them to dispose of this?
I also wonder if a much larger company, e.g. Some big pharma company, did the same. Would they suffer the same sort of penalty?