The ICO dished out tens of millions in fines last year
By Sead Fadilpašić published 19 April 21
The single biggest fine went to British Airways for the infamous 2018 data breach.
The UK data protection watchdog issued dozens of fines last year to companies in breach of Privacy and Electronic Communications Regulations (PECR) and the Data Protection Act (DPA).
According to a report from the Parliament Street think tank, the Information Commissioner's Office (ICO) fined 17 companies a total of $58.8 million last year. The bulk of this sum ($27.7m) came from British Airways (BA), which was penalized for exposing the personal data of 400,000 customers.
The second-largest fine, weighing $25.5m, fell on Marriott International. The hotel chain exposed the personal data, including passport numbers, of 339 million guests back in 2018. The company had acquired Starwood Hotels, unaware that its systems were already compromised, and was said to have failed to do its due diligence.
Ticketmaster rounds out the top three, with a fine of $1.7 million for data breaches on November 13, 2020.
"Moving forward, organizations should invest in a third-party data backup solution that runs in the cloud, to enable seamless, efficient and comprehensive backup of data on a granular level – allowing lost, stolen or misplaced data to be restored without delay," said Charlie Smith, Consultant Solutions Engineer, Barracuda Networks.
Keep your business safe with the best business antivirus solutions
Keychain password: What is it, how to find and change it
Millions of Microsoft users are reusing Windows passwords
Climate change is everyone's problem – so data must be part of everyone's solution
Critical success factors for government data sharing
Driving competitive advantage with intelligent automation
Nearly all SMBs suffer from serious IT and data compliance issues