Record £183m BA data breach fine

The BA data breach fine is set to be a record £183m; the first major fine of its kind in the UK since the new GDPR rules came into force last year.

The Information Commissioner’s Office (ICO) has referenced poor security that led to the information for hundreds of thousands of people to be comprised. We’re acting on behalf of a number of victims of the breach, and news of the fine has led to an influx of new inquiries.

There’s still time to join the British Airways data breach compensation action. We’re fighting for justice for victims on a No Win, No Fee basis as part of the pending group action for damages.

How the BA data breach fine has been calculated

The BA data breach fine is understood to be the biggest penalty the ICO has ever issued, but it’s not the maximum that the airline could have faced.

GDPR allows for fines to be a maximum of 4% of an organisation’s global annual turnover. In the case of British Airways, their fine of £183m equates to 1.5% of their global turnover for 2017.

Although it’s not the maximum that could have been issued, the level of the fine sends a clear message that the ICO is serious about punishing data breach offenders.

Impact on the group action for compensation

The BA data breach fine is separate to the group action for compensation that we’re representing people for, although the level of the fine is welcome news.

The £183m that’s set to be issued highlights the severity of this breach and the impact that information exposure can have on the victims.

If your information was exposed in the British Airways data breach incidents, you may be entitled to make a claim for compensation. You can find out more about the action and the eligibility criteria for joining here.

Response to the BA data breach fine

In response to the BA data breach fine, airline owner IAG said they were “surprised and disappointed” by the current findings. They’re entitled to appeal the decision in the next 28 days, and it’s understood that they’re looking at their options.

Information Commissioner, Elizabeth Denham, said:

“People’s personal data is just that – personal. When an organisation fails to protect it from loss, damage or theft, it is more than an inconvenience.

That’s why the law is clear – when you are entrusted with personal data, you must look after it. Those that don’t will face scrutiny from my office to check they have taken appropriate steps to protect fundamental privacy rights.”

Joining the group action for compensation

If you’ve yet to start your legal case for compensation as a victim of the data breach, you can sign-up here.

We’re representing victims on a No Win, No Fee basis because we’re confident that we can succeed with the action.

British Airways data breach fine and the compensation action

BA group action for compensation information