Data protection enforcement steps up with new penalty guidelines

The guidelines set out aggravating and mitigating factors, including the sensitivity of the data, the number of data subjects affected, and the speed and transparency of breach notification. Organisations are advised to review their records of processing activities and appoint a data protection officer where thresholds are met.