British Airways is facing a proposed $230 million fine under the EU’s General Data Protection Regulation (GDPR) for a hack last summer compromised personal information on approximately 500,000 customers accessing its website.
This proposed fine is more than 3 times the total fines meted out during GDPR’s first year. In the year after GDPR’s passage there were 200,000 investigations, 64,000 of which found fault, resulting in total fines of approximately $70 million — nearly 90% of which was from a single case against Google.