Well, it's better then nothing I guess? This is a fine for failing to report a breach after 22 days (not for the breach itself), of around 4000 users. Though

Well, it's better then nothing I guess? This is a fine for failing to report a breach after 22 days (not for the breach itself), of around 4000 users. Though I agree it could be higher for these organizations, it's also not a small fine just to fail to report.