UK Regulator Imposes Two Substantial Fines for GDPR Data Breaches

It follows months of investigation after British Airways notified the ICO of a security incident that led to the theft of customer data in September 2018.