Following a nearly two-year investigation and decision-making process, the Irish Data Protection Commission (DPC) on Tuesday fined Twitter €450,000 (U.S. $547,000) for breaching Europe’s strict privacy rules for failing to report a data breach within the required 72 hours and document it properly.

The Irish DPC said the fine under the General Data Protection Regulation (GDPR) is an “effective, proportionate and dissuasive measure.” Others are underwhelmed, as the penalty is equivalent to the social media firm’s earnings made in 90 minutes.

Neil Hodge is a freelance business journalist and photographer based in Nottingham, United Kingdom. He writes on insurance and risk management, corporate governance, internal audit, compliance, and legal...