‘General Data Protection Regulation fines are like a number 65 bus: you wait for a long time and then three arrive at once. In the space of a month the Information Commissioner’s Office (ICO) has issued three monetary penalty notices. All relate to breaches of GDPR’s security requirements as set out in articles 5 and 32.’
Law Society's Gazette, 7th December 2020
Source: www.lawgazette.co.uk