> There is no definite scale for the fines though, i'm pretty sure negotiating with the hackers will be cheaper 100% of the time This will not be true if any p

> There is no definite scale for the fines though, i'm pretty sure negotiating with the hackers will be cheaper 100% of the time This will not be true if any paid-off breach is ever discovered as then you'll have paid the hackers and the fine, which will be larger because you've deliberately kept it from the ICO/similar.