If you are found in breach, the regulator would approach you in good faith and assuming you are in good faith. You will be given time to fix your systems and th

If you are found in breach, the regulator would approach you in good faith and assuming you are in good faith. You will be given time to fix your systems and the regulator would allow some back and forth to get to the right result. In order to get a fine you have to act evidently in bad faith or to lose your users’ PII or credit card information. People don’t get fined billions because a legacy system saves an email address in the wrong table.