Will I be fined if there is a data breach? #GDPR

The Information Commissioner has other enforcement powers such as warnings and reprimands and powers to ensure appropriate standards are met, and it will use these to help support organisations to comply with the GDPR and DPA.

It does also have the power to fine and the fines under the GDPR are higher than before, up to £10 million Euros or 2% of global turnover. The maximum fine for non-compliance with an order by the supervisory authority, the ICO is double these amounts to £20 million Euros or 4% of total worldwide. The ICO has described these fines as last resort and for where a breach has been a result of gross negligence or criminal intent. Organisations may also face fines if they do not co-operate with the ICO in any investigation.

View our GDPR page for more information