Originally Posted by
EuropeanPete
I said this would happen, though I’m rather surprised to see the UK do this before any other EU country given the show there at the moment. I wouldn’t be surprised if there is more to come.
The UK Information Commissioner is acting on behalf of all the other EU national information regulators as part of a 'one stop shop' provision. Same as with the BA case.
https://ico.org.uk/about-the-ico/new...r-data-breach/
The ICO has been investigating this case as lead supervisory authority on behalf of other EU Member State data protection authorities. It has also liaised with other regulators. Under the GDPR ‘one stop shop’ provisions the data protection authorities in the EU whose residents have been affected will also have the chance to comment on the ICO’s findings.The ICO will consider carefully the representations made by the company and the other concerned data protection authorities before it takes its final decision.