That's only a warning shot. If they are found to violate it again it will be much higher.
Last year HN was complaining that GDPR made high fines possible that would sink any company. Now it's not enough.
Last year HN was complaining that GDPR made high fines possible that would sink any company. Now it's not enough.
Last year you read comments from people who said one thing, now you read a comment saying the opposite. That does not mean that HN has shifted. There are a lot of individuals on this platform with individual opinions.
If they do it again the fine will certainly be higher and sting a lot more. Possibly sink them.
It's certainly a shot before the bow, close enough to do some damage to the ship but not sink it quite yet.
The agencies are quite ready but it would take a pretty stupid management to step in front of that train willingly. Note that H&M was adamant that they would cease to collect this data (as they should be).
The only case I know of where there was a multiple-repeat-offender the eventual fine was 250K for a violation involving a single individual (hospital employees in NL thought it was 'fun' to peek on the records of a minor celebrity).