Agreed - my main problem with them is the asymmetry of their enforcement actions. I think the fine for the spammers I gave as an example was just and appropriat

Agreed - my main problem with them is the asymmetry of their enforcement actions. I think the fine for the spammers I gave as an example was just and appropriate, but again and again, if you look at any large organisation, they almost always just get a reprimand, or a fine that’s just a cost of doing business - if they are investigated at all. I reported a large IT supplier who are currently embroiled in a different scandal in the U.K. many years ago, because they were playing fast and loose with medical records. No action, no investigation, nothing.