BA hack leaves airline open to fines under tough data rules

British Airways may become the first high-profile company to run afoul of Europe’s far-reaching data privacy rules -- and face potentially hefty fines -- after a computer hack compromised credit card data from some 380,000 customers. The EU’s General Data Protection Regulation, or GDPR, which took effect in May, mandates that companies have to take technical precautions such as encryption to ensure client data is protected. It also states that firms must notify authorities about breaches within 72 hours after learning about them. Violations can be punished with as much as 4% of a company’s annual sales, which for BA could reach about US$633m based on 2017 figures. The hack at BA lasted for more than 2 weeks during the months of August and September. <br/>
Bloomberg
https://www.bloomberg.com/news/articles/2018-09-07/ba-hacking-leaves-airline-open-to-fines-under-tough-data-rules
9/7/18