Re: Well...
I'm not sure what particular relevance the UK's sales of good act has to the points being made here.
The (1998) Data Protection Act that the GDPR superceded provided a lot of wriggle room for the implementing states to apply things as they felt fit. The maximum fine was not set in the original Data Protection Act therefore it was up to each member state to set whatever values they felt appropriate. As for the UK always applying over the minimum regulation, that is not true as the UK chose to include only computer processed data in the original DPA even though the intention of the original act was to cover all mediums and other states chose to include all mediums as this was the intention. This kind of divergence is one of the many things that the GDPR has fixed over the DPA.
Biting the hand that feeds IT
