Lack of clarity on fines has dogged the GDPR since it took effect in May 2018, and the recent dramatic penalty reductions handed down by the U.K. in the cases of British Airways and Marriott certainly won’t help.
Neil Hodge
Neil Hodge is a freelance business journalist and photographer based in Nottingham, United Kingdom. He writes on insurance and risk management, corporate governance, internal audit, compliance, and legal issues for a wide range of publications in the United Kingdom and United States.
CCO Philippe Vollot has a plan for Danske Bank’s compliance reboot
Danske Bank CCO Philippe Vollot knows his journey to build a robust compliance program and culture at the troubled lender is far from over.
In second drastic reduction, ICO fines Marriott $23.8 million
The Marriott GDPR fine handed down by the U.K. Information Commissioner’s Office is less than 20 percent of the original number the regulator proposed, the second time this month such a drastic reduction has taken place.
Study questions effectiveness of U.K. management oversight regime
The U.K.’s financial services regulator is still failing to hold individuals accountable four years after introducing a program to improve oversight and enforcement, according to a new study.
U.K.’s SFO lays out expectations in new DPA guidance
The U.K. Serious Fraud Office has published its latest internal guidance on the threshold companies must meet before they are offered a deferred prosecution agreement.
FRC pushes for clarity on audit’s role in finding fraud
The proposed changes reflect regulatory fears that U.K. companies will be tempted to hide the scale of their financial losses as the effects of the coronavirus pandemic continue to dent balance sheets.
Anatomy of a 90% fine reduction: How BA saved $200M on GDPR penalty
The U.K. Information Commissioner’s Office agreed to slash its intended GDPR fine for British Airways from £183.39 million (U.S. $230 million) to just £20 million (U.S. $26 million). What was behind the massive reduction?
Corrective action could trump fines as GDPR evolves
Experts discuss whether EU data protection authorities would be better served using corrective actions other than eye-watering fines to encourage companies to commit to best (and legal) GDPR practices.
How Danske is cleaning up after a €200B money laundering scandal
It is not clear what action Danske Bank will take on the back of its investigation into Europe’s biggest-ever money laundering scandal, but it is a safe bet to think further improving compliance will be on the list.
‘FinCEN Files’ show Europe’s AML efforts maybe aren’t so world class
The damning revelations from the “FinCEN Files” leaks have once again put Europe and its supposed world-leading anti-money laundering rules under the spotlight.


