I am ok with it being below maximum for now.
They should start to increase the fines little by little and the big corps will caught on and start to treat the security with more respect.
The board should be planning some proper security. A £50m capital budget and £5m a year revenue should be good enough.
After all, you don't have such a leak every other week.
Will have to be a big fund.