Carrots
The ICO only uses the stick on outfits which are highly unlikely to lawyer up and challenge them.
The last time they misjudged that, the fines got poleaxed by a district court judge. They should have appealed it but didn't.
The chances of Talk Talk being issued with maximum fines (or any fines) are inversely related to their legal budget.
Biting the hand that feeds IT
