http://tech.newstatesman.com/gdpr/gdpr-how-does-the-ico-decide-whether-to-fine-businesses

The EU’s new General Data Protection Regulation comes into force today, ushering in new rights for citizens and new powers for regulators.

Businesses have been preparing for the deadline for the last two years, and so too has the ICO – the UK data protection regulator charged with enforcing the regulation. It has not been an entirely painless process.