{"id":1852,"date":"2019-11-13T07:30:02","date_gmt":"2019-11-13T07:30:02","guid":{"rendered":"https:\/\/www.groupactionlawyers.co.uk\/blog\/?p=1852"},"modified":"2025-11-26T09:30:55","modified_gmt":"2025-11-26T09:30:55","slug":"british-airways-gdpr-fine-and-group-action-were-avoidable","status":"publish","type":"post","link":"https:\/\/www.groupactionlawyers.co.uk\/blog\/british-airways-gdpr-fine-and-group-action-were-avoidable","title":{"rendered":"British Airways GDPR fine and group action were avoidable"},"content":{"rendered":"

Undoubtedly, the provisional British Airways GDPR fine in the sum of \u00a3183m, and the group action<\/strong> that could lead to an estimated cost of \u00a33bn, were both avoidable.<\/p>\n

All that was needed was for the airline to have had proper cybersecurity measures in place that could have prevented the 2018 cyber-attacks. Given what we know, and the fact that the Information Commissioner\u2019s Office (ICO) has deemed it necessary to issue a fine, this whole scandal could have been avoided.<\/p>\n

The fact that the attacks were successful is another example of big corporations being reactive as opposed to proactive. The costs of the fine and the litigation will no doubt serve as clear punishment for the fact that vital data protection laws have been breached. But make no mistake about it, this could have been prevented.<\/p>\n

<\/p>\n

British Airways GDPR fine and litigation avoidable<\/strong><\/h3>\n

It appears that it wouldn\u2019t have taken much for the British Airways GDPR fine to have been avoided, and the subsequent need for victims to claim data breach compensation<\/strong> to have also been prevented.<\/p>\n

In fact, researchers from HackerOne have reportedly put the estimated cost of a bug bounty that could have identified the vulnerabilities that led to the breach at less than \u00a310,000.00. When you put this into context, you can see how crazy it is that a company as big as BA has allowed this to happen:<\/p>\n