New EU fines will apply to ‘old’ data breaches
The new EU General Data Protection Regulation (GDPR) will require that companies that process personal data inform the relevant data protection authority in case of a data breach.
A European Commission official confirmed that data breaches that happened before 25 May, when GDPR comes into force, but are kept silent until after that, will also be liable for such a fine.
