--- title: GDPR & Security - Why British Airways was charged £183 million this week description: UK ICO dished out its biggest penalty to date to British Airways (£183 million (1.5% of their annual turnover), for an avoidable cyber blunder. image: https://blog.urim.app/hubfs/iStock%20Photos/URIM%20Presence%20Board/iStock-109219562.jpg --- [![urim](https://blog.urim.app/hs-fs/hubfs/URIM_June2019/Images/URIM-Final-LOGO-crop.png?width=1792&height=572&name=URIM-Final-LOGO-crop.png "urim")](https://urim.app/) - WHY URiM - [Overview](https://urim.app/about-us-overview/) - [Download URiM](https://urim.app/download-urim/) - [Download Brochure](https://urim.app/download-company-brochure/) - SOLUTIONS - [Use Cases](https://urim.app/solutions/) - [Client Quotes](https://urim.app/urim-excels/) - [Making Worklife Easier](https://urim.app/making-worklife-easier/) - PRICING - [Pricing / Quotation](https://urim.app/per-user-pricing/) - SUPPORT - [FAQ, Partners, Support](https://urim.app/faq/) - ABOUT US - [Overview](https://urim.app/about-us-overview/) - [Terms of Use](https://urim.app/wp-content/uploads/2019/05/Terms-of-Use_v01.pdf) - [Privacy Statement](https://urim.app/wp-content/uploads/2019/05/Privacy-Policy.pdf) - [Data Protection Policy](https://urim.app/wp-content/uploads/2019/05/Data-Protection-Policy_0104_2019_v1.pdf) - [Information Security & BC Policy](https://urim.app/wp-content/uploads/2019/05/Information-Security-and-Business-Continuity-Policy.pdf) - [How does URiM safeguard my data?](https://urim.app/wp-content/uploads/2019/05/URIM-Safeguard3_190403.pdf) - [Quality Policy](https://urim.app/wp-content/uploads/2019/05/Quality-Policy-V1_0104_2019.pdf) - [Whistleblowing Policy](https://urim.app/wp-content/uploads/2019/05/whistleblowing-policy_v1_0104_2019.pdf) - [Supplier Diversity Policy](https://urim.app/wp-content/uploads/2019/05/Supplier_Diversity_Policy_v1.0_190401_7.pdf) - [Contact Us](https://urim.app/contact-us/) ## GDPR & Security - Why British Airways was charged £183 million this week Posted by [El Hammond](https://blog.urim.app/blog/author/el-hammond) on Jul 10, 2019 7:19:14 AM Find me on: [LinkedIn](https://uk.linkedin.com/pub/dir/Eleanor/Hammond) - [Tweet](https://twitter.com/share)     ![iStock-465352059](https://blog.urim.app/hs-fs/hubfs/iStock-465352059.jpg?width=369&name=iStock-465352059.jpg)   This week, the UK Information Commisioner’s Office dished out its biggest penalty to date to British Airways, for an avoidable cyber blunder. British Airways was fined more than £183 million (1.5% of their annual turnover) after hackers stole the personal information of an estimated 500,000 customers, including ‘login, payment card, name, address and travel booking information…harvested after being diverted to a fraudulent website’. The real kicker for the UK’s mega airline, is that this gaffe wouldn’t have been nearly as financially traumatising just a few years ago. In 2014/2015, personal information of 87 million users was harvested for the Cambridge Analytica and Facebook was charged a paltry £500k for its part in the scandal. At the time, half a million was the maximum fine legally permitted for such a security breach, based on the prevailing Data Protection Act. However, you could reasonably categorise this as a mere ‘slap on the wrist’ financially, as Facebook makes this figure in revenue roughly every 5 and a half minutes. Now, it seems the game has substantially changed, as the ICO pull out the big guns. And rightly so for you and I. Our fast-evolving digital age readily graces us with many perks, such as online shopping, long-distance communication, not to mention oceans of information on anything and everything at our fingertips. However, such privilege comes at a price. With innovation comes the opportunity for exploitation and the growth of cyber space makes plenty of room for a burgeoning torrent of budding hackers. Fuelled with malicious intent, they aim to abuse, manipulate and inconvenience you, for financial or sadistic gain. **First rule of Hack Club: ‘if there is a vulnerability, it will be exploited’.** ![iStock-109219562](https://blog.urim.app/hs-fs/hubfs/iStock%20Photos/URIM%20Presence%20Board/iStock-109219562.jpg?width=300&name=iStock-109219562.jpg)**Lessons to learn** Whether it is ICO’s intention to make an example of British Airways and discourage others from becoming apathetic about adequate data management, there are some clear pointers we can all take from BA’s mistake. - There is never a good time for a bad fine - Do not mess with the ICO - Abide by General Data Protection Regulation - Correct Data handling is cheaper than the alternatives - Invest in cyber safety nets, systems and security to keep data personal! ***Better safe than bankrupt. *** Topics: [Security](https://blog.urim.app/blog/tag/security), [GDPR](https://blog.urim.app/blog/tag/gdpr) # Powerful, Simple and Safe ## Works like Magic URIM makes your worklife easier. It’s a simple, powerful app that works on the principle that "knowledge is power". It takes the key information your mobile workforce needs and puts it at their fingertips.     ### Subscribe Here! ### Recent Posts ### Posts by Tag - [GDPR (3)](https://blog.urim.app/blog/tag/gdpr) - [Security (2)](https://blog.urim.app/blog/tag/security) ![URIM](https://blog.urim.app/hubfs/URIM_June2019/Images/URIM-Final-LOGO-crop.png) ### Get In Touch! 130 Old Street, London, EC1V 9BD [sales@urim.app](mailto:sales@urim.app) UK Company Number: 11834782 ICO Reference: ZA509890 ### Additional Resources - [FAQ](https://urim.app/faq/) - [Privacy policy](https://urim.app/wp-content/uploads/2019/05/Privacy-Policy.pdf) - [Terms and conditions](https://urim.app/wp-content/uploads/2019/05/Terms-of-Use_v01.pdf) © 2019 Urim. All Rights Reserved.