The UK High Court came down on the side of consumer privacy recently when they ruled that those half million individuals who were affected by the British Airways data breach of September 2018 may now sue.
The UK Information Commissioners Office (ICO) investigated the data breach / cyber attack and determined that customers were diverted to a fake website where their personal identifying information (PII) was harvested by the cyber criminals.
ICO fines British Airways
In July 2019, the ICO noted it intended to levy a fine of over £183.39M ($234M) on British Airways for infringements of the General Data Protection Regulation (GDPR).
“People’s personal data is just that – personal. When an organisation fails to protect it from loss, damage or theft it is more than an inconvenience. That’s why the law is clear – when you are entrusted with personal data you must look after it. Those that don’t will face scrutiny from my office to check they have taken appropriate steps to protect fundamental privacy rights.”
Information Commissioner Elizabeth Denham
The judge noted that claimants, those of you who were affected, have a 15 month window in which to come forward and join the “group litigation.”
SPG Law, the lead firm representing the claimants, the affected customers may be able to claim up to £1,250 (€1,396 - $1550) each in compensation, with SPG consultant Nigel Taylor telling GDR in July that affected customers could expect to receive at least £750 (€841), based on previous cases.
To file a claim visit BA Data Breach.