BrewDog Founder Faces Data Privacy Fallout as “Second Best” Offer Rocks the Market

BrewDog founder James Watt sent a free‑share invitation to 43,000 former investors through his new venture “Second Best,” but the move is now clouded by data‑privacy breach allegations.

The Comeback Play: Unveiling Second Best

After selling BrewDog’s brand, IP and 11 bars to US‑based Tilray for £33 m, Watt surprised the same crowd of investors with a message to “transfer your old shares to Second Best at no cost.” The pitch was seen as a bold attempt to regain control.

Privacy Concerns and ICO Complaints

■Over 200,000 crowdfunding investors saw their equity wiped out; a subset cannot explain how their email addresses were sourced.

■Complainants have lodged GDPR breach claims with the UK’s Information Commissioner’s Office (ICO).

■Watt maintains the communication was sent “under legal advice, using lawfully obtained data and in connection with shareholders’ legitimate interests,” without revealing the data source.

Tilray and the Acquirers’ Stance

■Tilray asserts it did not acquire any equity‑punk shareholder data in the BrewDog transaction, which remains under BrewDog plc (in administration) control.

■The company emphasizes its “utmost seriousness” about data privacy and confirms no data was shared with external parties.

Market and Investor Implications

■Potential ICO fines, coupled with a high‑profile data scandal, could erode investor confidence.

■BrewDog’s restructuring may introduce uncertainty around share liquidity and its ability to raise fresh capital.

■The episode may trigger a reassessment of risk profiles for global fintech and data‑protection‑focused ventures.

Ege Kaan – Wall Street and U.S. Macro Strategy Lead

Watt’s “Second Best” play could attract short‑term investor attention, but the GDPR probe threatens the company’s capital‑raising capacity. Should the ICO impose hefty penalties, Tilray, as the new owner, will need to bolster its data‑governance and reputation management. Markets are increasingly pricing data‑privacy risk directly into corporate valuations, a warning especially for tech‑driven fintech firms.