Interesting to see how this plays out in a different jurisdiction to mine. Here in the US, it seems like as long as penalties remain very light, PII retention a

Interesting to see how this plays out in a different jurisdiction to mine. Here in the US, it seems like as long as penalties remain very light, PII retention and security is not taken very seriously. Equifax's breach in 2017 was essentially every valuable piece of PII they had, on more than half the households in America, and they settled for $300 million in a civil suit. Their net income (after all expenses) every year is in the $500-700 million range. They should have been fined directly, an amount intentionally set to force complete liquidation, shareholders should have been completely wiped out, and all proceeds from the liquidation after court costs should have been distributed to every victim of the breach. If that was the case, 100% of US companies would now treat PII with the respect it deserves. As it stands, nah, it's nbd here.