Comment by everfrustrated

In the UK, and I presume the EU also, the fines for losing customer data are set as a % of company annual worldwide turnover.

https://ico.org.uk/for-organisations/law-enforcement/guide-t...