3 ms·

It appears that the maximum fine is 4% of a corporation's global earnings[1] which could be a lot of money, but still "just a cost of doing business" at the sam

• isostatic 8y ago
  Global turnover. "Earnings" tends to mean profit. Uber is somewhere around $10b gross revenue, so $400m fine for every breach. Sure it's "just a cost of doing business". It also means that it's better to spend $200m beefing up their security to reduce from 1 data breach every year to one every 5 years. Marriot revenue is $23b, so that's a potential $920m fine. IHG (say), who invest in security and don't have a breach, get to charge less for their hotels, or make more profit.
• nkkollaw 8y ago
  I thought the same thing, but I was corrected here on HN: if you read the same exact like you posted, it says "a fine up to €20 million or up to 4% of the annual worldwide turnover of the preceding financial year in case of an enterprise, whichever is greater", so the they ARE allowed to fine you EUR 20 million. Much more than "just a cost of doing business" for the majority of companies.