Welcome To The Data Leak Lawyers Blog

Will we see a Marriott GDPR fine?

We may see a Marriott GDPR fine applied after the monumental breach that was discovered last year, given the volume of people affected and the nature of the breach.

As many as 500 million people were affected, with data said to have been compromised between 2014 and 2018. An unauthorised third-party is said to have accessed the guest reservation table fore the Startword division of the company. Data exposed in the breach included a lot of personal and account data.

The breach lapses over GDPR coming into force in May 2018. That means that the ICO (Information Commissioner’s Office) could issue a fine that equates to 4% of the Marriott’s global annual turnover.

read more

By Author

The big Facebook GDPR questions

It seems highly likely there will be some form of Facebook GDPR fine coming at some time. The recent data breaches cannot go unpunished.

As data breaches and our rights to privacy continue to grow in importance, people want to know how GDPR will be there to protect us. With the massive Facebook data breach that took place in September fresh in our minds, people want to know what kind of Facebook GDPR fine may be issued.

Facebook could find themselves as the marker in Europe for how far the new GDPR will go. Although it isn’t the first company to have been at the centre of a data breach since the rule change in May, it could be the biggest.

read more

By Author

British Airways GDPR fine and victim compensation

The British Airways GDPR fine could be as large as £500m, with several more millions on top of that to be paid to victims in compensation.

We’ve launched our British Airways compensation action, and you can read more about your rights to claim here.

In terms of a fine, the new GDPR rules mean that a company responsible for a data breach is fined £17m or 4% of the company’s global annual turnover. The potential £500m figure has been based on the estimations of turnover, given how huge British Airways is.

Is this a feasible fine, and what about victims and their rights to compensation? How much could you receive?

read more

By Author

Is there a Ticketmaster GDPR fine on the horizon?

Are we going to see a Ticketmaster GDPR fine given that at least some victims of their data breach had their information exposed after the May 2018 legislation change?

There are a few thing to look at when considering which legislation will apply; i.e. the old or the new. The breach actually spans across the deadline because some information in this breach was exposed both before and after the GDPR legislation came into force.

So, which will apply? Will the test be that the information was initially exposed before the deadline, meaning the old rules apply, or are we saying that the data being exposed after the deadline means GDPR will apply?

read more

By Author

Dixons Carphone data breach GDPR implications

The Dixons Carphone data breach GDPR implications is something that’s a little unclear at present. The data breach took place last year but was only announced this year.

Irrespective of whether we will see a Dixons Carphone data breach GDPR fine or not, we’re taking legal action, and we’re representing victims of the breach on a No Win, No Fee basis for compensation claims.

But, will Dixons Carphone be hit with a huge fine off the back of the new GDPR regulations?

read more

By Author

What would happen to Carphone Warehouse if their 2015 data protection breach happened after the new GDPR laws come into force?

Back in 2015, hackers were able to easily access the databases of Carphone Warehouse who had reportedly failed to fix known flaws in their cybersecurity which may have been known about the previous year. As a result of the failure to adequately secure their systems, they were hit with a successful cyberattack.

The final report from the Information Commissioner’s Office (ICO) was issued earlier this year, and Carphone Warehouse were hit with a £400,000 fine – one of the largest fines the ICO has ever issued.

With the new GDPR laws set to come into force in May 2018, wouldn’t it be interesting to see what would happen to Carphone Warehouse if this breach took place after the new data protection rules were in place?
read more

By Author

ICO publishes useful guides on the new GDPR

Head of policy and engagement at the Information Commissioner’s Office, Jo Pedder, points to useful guidance on the new EU General Data Protection Regulation that is set to come into force come May 2018.

The regulation will bring in some major changes as to how organisations are expected to look after personal data and the responsibilities in disclosing them to the authorities and affected individuals. The changes could mean huge punishments for organisations who fail to take their data protection responsibilities seriously.
read more

By Author