> So there is no story, but a potential story on a potential For what it's worth, GDPR fines have been handed out for missing access restrictions, e.g. for sen

> So there is no story, but a potential story on a potential For what it's worth, GDPR fines have been handed out for missing access restrictions, e.g. for sensitive data not having or checking audit logging and applying 2FA. Though I do agree it makes for a more lousy news story than if it had happened.