topic Re: First big fine by ICO in Privacy

First big fine by ICO

Steve-Wilme — Mon, 08 Jul 2019 07:24:07 GMT

I suppose it had to happen; the first big fine under GDPR in the UK for a data breach; 1.5% of its worldwide revenue. https://www.bbc.co.uk/news/business-48905907

Re: First big fine by ICO

leroux — Mon, 08 Jul 2019 12:48:02 GMT

ICO Statement :Intention to fine British Airways £183.39m under GDPR for data breach

Re: First big fine by ICO

Wakeling_S — Tue, 09 Jul 2019 08:59:15 GMT

This case, although painful for BA, will and should be raised as a what if risk example at all senior executive boards in forthcoming weeks. I would be interested if anybody in this community has any references or good examples of non technical briefings as to the web site hack.

Re: First big fine by ICO

pcarner — Tue, 09 Jul 2019 10:36:29 GMT

It sounds diluted to me. Wouldn't be 4% what applies in these cases?

Re: First big fine by ICO

leroux — Tue, 09 Jul 2019 13:43:22 GMT

You are right. The ICO's intended fine isn't the maximum. For British Airways, the potential fine amounts to 1.5% of its annual turnover in 2017, under half of the maximum GDPR penalty of 4% of annual turnover. If the ICO had deemed it appropriate, it could have issued a fine of over £450m.

But this is four times the size of the previous largest fine – that €50m penalty was issued to Google by the French data protection authority for a lack of transparency in its advertising