This isn't necessarily the first time they've done this, it's the first time they've been caught. Think of the money saved by not training 6370 staff in data p

This isn't necessarily the first time they've done this, it's the first time they've been caught. Think of the money saved by not training 6370 staff in data protection and not having any kind of enforcement of policies. The minimum wage in the UK is now £7.83 per hour. Assuming it was £7.50 at the time, and that data protection training takes a couple of hours with no other costs, then that's about £95,000. Add in admin, national insurance, mandatory pensions and such and it's got to be about break even in a year. That's before we factor in staff turnover. Under the Data Protection Act 1998, there were cases where it clearly paid to deliberately not comply. Will a data breach make people choose to shop elsewhere? People already go out of their way to avoid Heathrow if they can, so any reputation loss is negligible.