Re: Up to €20m includes the figure zero
There has to be room for willfulness. So Talk Talk were heavily fined but it seemed to be for sheer incompetence.
The £500K fine would be for a company who made a decision to act recklessly or even criminally with data and were found out.
With the new fines I think there will be more emphasis on hurting the company's bottom line and will be relative to the size of the company but will still have a major element of whether it was premeditated or not.