Figures obtained under a Freedom of Information Act request show that Britain’s data protection watchdog has imposed just 29 financial penalties out of a total of 11,468 self-reported data breach cases since Europe’s toughened privacy rules came into force last May.
Furthermore, all of the financial penalties were made under the United Kingdom’s previous legislation, the Data Protection Act, rather than under the European Union’s General Data Protection Regulation (GDPR).

