News for hackers. Stuff that matters.

A comment on Moonpig.com Vulnerability – Exposes customer data. Parent comment

Re:Moonpig.com Vulnerability – Exposes customer data by iamtew on Monday January 05, 2015 @08:01PM (#8842344)
Doesn't matter, if they're a UK based company they fall under the EU GDPR and can receive a fine of 5% of their worldwide turnover for any loss of personal data, blanked out credit card numbers or not.

http://en.wikipedia.org/wiki/General_Data_Protection_Regulat...

[ Parent | on HN ]
Re:Moonpig.com Vulnerability – Exposes customer data by peteretep on Monday January 05, 2015 @09:48PM (#8842663)
There are more egregious examples of data protection violation here, and the fines look pretty small:

https://ico.org.uk/action-weve-taken/enforcement/

[ Parent | on HN ]
Re:Moonpig.com Vulnerability – Exposes customer data by grabeh on Tuesday January 06, 2015 @07:36AM (#8844044)
A cursory read of your own link would have told you that the new Data Protection Regulation is not yet in force and so the figure you quote is incorrect.

The ICO in the UK currently has the ability to fine up to £500k as I understand it.

[ Parent | on HN ]