The existing fines in the UK of upto £500,000 are a significant risk, but don't seem to have had much impact on start ups. It should also be reassuring to see that the maximum fine of £500,000 has never been applied.

A company really has to do terrible things to data to come anywhere near the €20m maximum fine.