The Data Protection Act 2018 enhances the powers of the Information Commissioner’s Office (ICO) to regulate and enforce data protection laws.
For the most serious data breaches, organisations are liable to receive a fine as high as £17 million or 4% of global turnover, whichever is higher. This is a straight conversion of the maximum sanction permitted under the GDPR.