Re: Total game changer!
"Well, GDPR has certainly put the cat among the infosec pigeons now! This gigantic, eye-watering fine will devastate the £12 Bn[1] annual turnover firm and cause a revolution in security throughout the country."
Go back and read the article. Notice the bit that says "June last year". Compare that with the date GDPR became operative. Note that it's earlier so the old rules apply under which the maximum fine was £500,000. At 2% of annual turnover the maximum fine would have been nearly 500 times larger form a £12bn under GDPR.
Go back to the article again and notice the bit that says that they turned themselves in. That automatically exempts them from a maximum fine - if it didn't work that way there'd be no incentive for anyone to do that.