http://tech.newstatesman.com/business/dixons-carphone-hack-gdpr-fine

Dixons Carphone will not be subjected to GDPR-level fines over a data breach involving millions of customers’ details, NS Tech understands.

The new regulation gives the ICO the power to hand out fines of up to 4 per cent of a company’s annual turnover – but the watchdog will assess the breach based on the Data Protection Act 1998 because it took place before the new rules came into force. The outgoing law lets the ICO issue fines of up to £500,000.