ICO fine incoming ... or not?
"Were were subject to malware on our system and breached GDPR" (BA with massive turnover) ICO Result: massive cashcow fine.
"We willingly gave data from our system and breached our own policies and GDPR" (KCL) ICO Result ...?
Will be interesting to see what happens with the ICO investigation ... consistency should and would be expected ...