The ICO recently announced that American Express Services Europe Limited had been fine £90,000 for sending more than 4 million emails, containing marketing information, to people who had not consented to receive them. That is illegal under the PECR regulations
You can read the ICO statement here.