Business

PricewaterhouseCoopers (PwC) is the first of the “Big 4” to be fined under GDPR. The Greek Data Protection Authority (DPA) recently fined the audit group €150,000 for wrongly using “consent” as a basis for processing personal data on staff. The DPA have now given PwC three months to implement corrective measures and comply with GDPR.

University of Oxford-based researcher James Pavur contacted UK and US-based firms to test how they would handle a “right of access” request made in someone else’s name. For the purposes of his investigation, he asked each of them for all the data that they held on his fiancée, citing the General Data Protection Regulation (GDPR).

The Information Commissioner’s Office (ICO) has issued British Airways with a huge penalty after the personal details of more than 500,000 customers were stolen from its website and app. The data watchdog has told the International Airlines Group (IAG) that the fine will be equivalent to 1.5% of its worldwide turnover for 2017. Last September,

UK organisations are required to pay the Information Commissioner’s Office (ICO) an annual data protection fee unless they are exempt. The fee payable depends on the tier of the organisation, and ranges from £40 to £2,900. Companies could also be fined a massive £4,350 if “aggravating factors” are present, and the funds thus recovered go