Research suggests data protection fines have 'risen by 14% in a year'

30 May 2019

Research carried out by law firm RPC has suggested that the average data protection fine levied by the Information Commissioner's Office (ICO) has risen by 14% in the year since the introduction of the General Data Protection Regulation (GDPR).

The GDPR came into effect on 25 May 2018, placing additional obligations on businesses in regard to the safeguarding of personal data.

According to RPC, the average fine has increased from £125,000 in 2017/18 to £143,000 in 2018/19. The law firm also suggested that, since the introduction of the GDPR, the ICO 'is becoming more willing to levy bigger fines'.

'The ICO has already begun to ratchet up the value of fines, and it has barely scratched the surface of its powers,' said Richard Breavington, Partner at RPC.

'However, we don't expect to see blockbuster €20 million fines being levied in the near future. So far, the regulator has only started to hit businesses with the £500,000 maximum fine for breaches under the old Data Protection Act.'

Southampton Office

12-14 Carlton Place
Southampton
Hampshire
SO15 2EA

Tel: 02380 234 222

Winchester Office

6 Charlecote Mews
Staple Gardens
Winchester
SO23 8SR

Tel: 01962 842000

Reading Office

3 Richfield Place
Richfield Avenue
Reading, Berkshire
RG1 8EQ

Tel: 0118 9511 115

London Office

90 Long Acre
Covent Garden
London
WC2E 9RZ

Tel: 0203 470 0777