British Airways GDPR fine and victim compensation

Data Leak Lawyers - Begin Your Data Breach Claim Today!

Sign-up to a data breach claim today - use our quick and easy form to begin your claim for thousands of pounds in compensation.

Start Your Claim
Your privacy is extremely important to us. Information on how we handle your data is in our Privacy Policy

solicitors regulation authority

British Airways GDPR fine and victim compensation

The British Airways GDPR fine could be as large as £500m, with several more millions on top of that to be paid to victims in compensation.

We’ve launched our British Airways compensation action, and you can read more about your rights to claim here.

In terms of a fine, the new GDPR rules mean that a company responsible for a data breach is fined £17m or 4% of the company’s global annual turnover. The potential £500m figure has been based on the estimations of turnover, given how huge British Airways is.

Is this a feasible fine, and what about victims and their rights to compensation? How much could you receive?

How will the British Airways GDPR fine be calculated?

How the British Airways GDPR fine will be calculated is an interesting question. They may be the first – or one of the first – to receive a fine under the new rules.

How will the Information Commissioner’s Office (ICO) decide to levy the fine in this case?

How fines are calculated is typically based on factors, such as:

  • The extent of the breach or breaches (i.e. how many of the data protection principles were breached, and how badly were they breached);
  • What, if anything, British Airways did to prevent the breach from happening;
  • What were the warning signs that a breach could take place?;
  • The nature of the data that has been breached;
  • The number of people affected.

In terms of the British Airways data breach, the incident is serious. We’re talking about some 380,000 payment cards being fully compromised; i.e. full card numbers, expiry dates and security (CVV) numbers. It’s often partial payment information that’s breached, but in this case, it was more.

And there were warning signs. Just weeks before, news that Ticketmaster (an action we’re also representing victims for) had suffered a breach came to light. It’s understood that it’s the same hackers in both cases, and there were warnings that the Ticketmaster breach was merely the tip of the iceberg.

Payment processing systems were to be targeted. How did British Airways fail to act in time?

These factors may mean the British Airways GDPR fine is huge; perhaps even the maximum amount that could reach £500m.

Victim compensation separate to any BA GDPR fine

It’s important to know that compensation for victims of the breach is separate to any British Airways GDPR fine that may be imposed.

Victims of the breach could be entitled to claim £1,250.00 or more for the distress, and any financial loss on top.

Find out today if you can join the British Airways compensation action we’ve launched here.

The content of this post/page was considered accurate at the time of the original posting and/or at the time of any posted revision. The content of this page may, therefore, be out of date. The information contained within this page does not constitute legal advice. Any reliance you place on the information contained within this page is done so at your own risk.

We offer genuine No Win, No Fee agreements for our clients. Why we do this is simple:

Leading Data Breach Lawyers
Our experience speaks for itself.
We will fight for your right to compensation.
Access to Justice
As a victim of a data breach or hack, you deserve your chance to get access to justice.
Risks Assessment
We carefully risk assess your case and take it on if we think we have a good chance of winning the claim.

Request A Callback From Our Team

Fill out our quick call back form below and we'll contact you when you're ready to talk to us.

Your privacy is extremely important to us. Information on how we handle your data is in our Privacy Policy
Contact is © of Your Lawyers Limited - we are 'Authorised and Regulated by the Solicitors Regulation Authority (SRA number 508768)'
arrow-up icon