Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 23 OCTOBER 2020

British Airways' Fine Reduced To £20 Million

HGF Law
Explore more from HGF Law

Information Commissioner's Office substantially reduces the intended fine following BA submissions and full consideration of the issues.

United KingdomPrivacy
James Talbot
James Talbot
Emily Shelton
Emily Shelton
Author LinkedIn connections

Information Commissioner's Office substantially reduces the intended fine following BA submissions and full consideration of the issues.

Back in September 2018 we wrote about BA experiencing a large scale data breach following a sophisticated criminal attack (you can read the article here) which involved the bad actor compromising BA's systems by misusing legitimate credentials which BA had given a third party service provider's staff member. In the aftermath of the breach, the ICO announced their intention to fine BA £183 million, however, following three rounds of submissions from BA the ICO have now issued a notice that they are fining BA £20 million (initially reduced down to £30 million then to £20 million including a £3 million COVID-19 deduction) for the data breach that affected more than 400,000 BA customers; and allowed unlawful access to over 100,000 credit card details.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Ten AI Giants, One Regulator And A Lesson For Everyone Else: What The ICO’s Foundation Model Report Really Tells Us

The UK's Information Commissioner's Office has completed its supervision of major AI foundation model developers, revealing significant gaps in data protection practices and setting new expectations for legitimate interests assessments, transparency, and special category data handling. The regulator has now turned its attention to agentic AI systems, warning that autonomy is not an excuse for poor compliance and launching a call for evidence that will shape future regulatory guidance.
United KingdomPrivacy
Burges Salmon LLP
Burges Salmon LLP
Article

To Fine Or Not To Fine: EDPB Confirms Default Position In GDPR Enforcement Should Be To Fine

The European Data Protection Board has published draft guidelines proposing a fundamental shift in GDPR enforcement: a presumption that fines should be imposed for non-minor infringements, with a deliberately low bar for establishing negligence. Organizations will need to demonstrate robust compliance programs and documented decision-making to potentially avoid penalties, as regulators move from asking "should we fine?" to "can we justify not fining?"
GlobalPrivacy
Crowell & Moring LLP
Crowell & Moring LLP
Article

ICO Cookie Crackdown 2.0: The ICO’s New Storage And Access Technologies Guidance

The UK Information Commissioner's Office has finalized its guidance on storage and access technologies, expanding compliance requirements beyond traditional cookies to include tracking pixels, device fingerprinting, and web storage. Organizations must now navigate stricter consent standards and three new narrow exceptions introduced by the Data (Use and Access) Act 2025, while facing significantly increased enforcement penalties of up to £17.5 million or 4% of annual worldwide turnover.
United KingdomPrivacy
ZwillGen
ZwillGen
Article

Private CCTV, Ring Doorbells And Police Investigations: Where Does UK GDPR Draw The Line?

Domestic surveillance technology has evolved from simple security cameras to sophisticated smart systems that may inadvertently create legal obligations for homeowners. When does a Ring doorbell or CCTV system transform an ordinary citizen into a data controller subject to UK GDPR, and what are the implications of millions of private cameras forming an unregulated surveillance network?
United KingdomPrivacy
HCR Law
HCR Law
Article

The ICO's Agentic AI Call For Evidence: What You Need To Know

The UK's Information Commissioner's Office has launched a six-week consultation on agentic AI systems, examining how data protection law applies to autonomous AI agents that can make decisions and take actions with minimal human oversight. The call for evidence focuses on six critical themes including data security, transparency, accountability, automated decision-making, fairness and purpose limitation, and lawful bases for processing personal data.
United KingdomPrivacy
TLT
TLT
Article

High Court Clarifies The Limits Of Copyright Claims Against Online Marketplaces

The UK High Court has delivered a landmark ruling on online marketplace liability, dismissing Shein's copyright infringement claims against Temu and clarifying when platforms can be held responsible for third-party content. The judgment examines the boundaries of copyright ownership in complex supply chains and establishes important precedents for how marketplace operators should respond to infringement allegations.
United KingdomIntellectual Property
HGF Law
HGF Law
Article

UPC CoA Confirms Jurisdiction Over Pending European Patent Application

The UPC Court of Appeal has confirmed that the Unified Patent Court can exercise jurisdiction over European patent applications, provided they are granted before the defendant files their statement of defence. This landmark decision means patent holders may now be locked into the UPC system even before their patents are officially granted, fundamentally changing the strategic timing considerations for opting out of UPC jurisdiction.
United KingdomIntellectual Property
HGF Law
HGF Law
Article

Patenting Performance: Protecting The Science Behind A Personal Best

Nomio, a broccoli-based sports supplement gaining popularity among endurance athletes, has secured patent protection for its innovative use of sulforaphane to enhance exercise performance and treat metabolic conditions. This analysis explores how the company leveraged university research to protect both therapeutic and non-therapeutic applications of their simple three-ingredient formula, demonstrating that even products with common ingredients can achieve robust patent protection through novel use claims.
United KingdomIntellectual Property
HGF Law
HGF Law
Article

Protecting The AI Drug Discovery Ecosystem: Building An IP Stack Around Targets, Molecules And Medicines

As computational biology and artificial intelligence reshape drug discovery, pharmaceutical companies face a critical challenge: how to protect not just the final therapeutic compound, but the entire ecosystem of datasets, models, and biological insights that enabled its creation. This article examines the evolving intellectual property landscape where 90% of clinical candidates still fail, yet the tools predicting their success are becoming as valuable as the medicines themselves.
United KingdomIntellectual Property
HGF Law
HGF Law
Article

UK Patents Court Reinforces The UK Threshold For Plausibility

The UK Patents Court has upheld Novartis' patent and SPC protecting Entresto, its blockbuster heart failure treatment combining valsartan and sacubitril, rejecting all validity challenges from generic manufacturer Accord Healthcare. The judgment provides crucial guidance on plausibility requirements where experimental data have been generated but not fully disclosed in the patent specification, clarifying when qualitative disclosure of positive results suffices without detailed numerical data.
United KingdomIntellectual Property
HGF Law
HGF Law
Article

UPC CoA Confirms “gold Standard” For Added Matter In Sibio v Abbott

The Court of Appeal of the Unified Patent Court recently issued a decision examining whether omitting an elastomeric sealing member from a patent claim constitutes added matter, applying the EPO's "gold standard" test while emphasizing the importance of functional and structural relationships between features. The ruling provides crucial insight into how the UPC approaches intermediate generalizations and whether its methodology differs from the notoriously strict EPO practice on added subject-matter.
LuxembourgIntellectual Property
HGF Law
HGF Law
Article

Cleaning Up The Laundry: Innovations In Mitigating Microplastic Contamination From Man-made Fabrics

Microplastic contamination from synthetic textiles poses a growing environmental threat, with fibres from man-made fabrics entering water systems through washing machine effluent. As countries like France mandate microplastic filters in washing machines and the EU implements new wastewater treatment rules, innovative companies are developing filtration technologies and novel removal methods to combat this pervasive pollution problem.
United KingdomEnvironment
HGF Law
HGF Law