https://www.theregister.co.uk/2019/12/23/rain_falls_on_london_pharmacy_stung_by_icos_first_fine_under_gdpr/

A pharmacy that left around half a million documents, including customers' personal information and medical data, in unlocked storage at the back of its premises, has been fined £275,000 - a financial penalty the ICO has issued under the General Data Protection Regulation.

UK data watchdog, the Information Commissioner’s Office, said London-based Doorstep Dispensaree Ltd, which supplies medicines to both individual customers and care homes, failed to secure the records. The data also contained addresses, dates of birth, NHS numbers and prescriptions pertaining to an unknown number of people.