3 ms·

> Shouldn't the company be punished for the security failure in the first place? Yes. The GDPR has provisions for this. But enforcement is still relatively lig

> Shouldn't the company be punished for the security failure in the first place? Yes. The GDPR has provisions for this. But enforcement is still relatively light.