I think it would go further. The CMA can impose fines of 10% of worldwide revenue if they ignore the breach, and also disqualify at least the UK business unit c

I think it would go further. The CMA can impose fines of 10% of worldwide revenue if they ignore the breach, and also disqualify at least the UK business unit company directors from holding another UK company directorship for up to 15 years (in any company). I think the only way to do it would be to entirely pull Adobe out of the UK market. This would be extremely difficult for many reasons, not only that Adobe has many multi year enterprise license agreements with many UK companies which would incur enormous penalties for severing them, plus the UK is probably still a quite large market for Adobe. I'm not even sure if that's possible though, as they could still get a judgement in the UK and then take that to other jurisdictions to get payment for fines and other breaches.