The Information Commissioner's Office (ICO), the UK's data regulator, made headlines in July 2019 when it announced its first two fines for data breaches under the General Data Protection Regulation (GDPR).  Both fines were unprecedented compared to enforcement action taken by other regulators in Europe under GDPR.