Question: what are the consequences of not complying with the data protection act?
Answer: Under GDPR, organisations who fail to comply and/or suffer a data breach could face a fine. In the most serious cases, this fine could be up to 17 million euros, or 4% of a company's annual turnover. This upper limit far exceeds the current maximum fine of £500,000 allowed under the Data Protection Act.