Data Security and Privacy Lessons from Recent GDPR Fines

Andy Green argues that, between the $56 million fine by France against Google, the UK's intended combined fines of over $320 million against British Airways and Marriott, and some lesser but still significant fines against other companies, we have enough GDPR enforcement cases to understand what’s really being enforced and to draw some security and privacy lessons.