Reply to post:

If they were seeking (more) court convictions against companies for data protection issues (e.g. prison or shutting them down) then I'd be sympathetic to the reduced fines. But reducing the fines and doing nothing else???