[Aengeuad]

As somebody else pointed out, they're being tracked by the ICO [0]. I think they previously had a blog where they documented enforcement while the UK was still under the older Data Protection legislation but I can't seem to find it.

[0] https://ico.org.uk/action-weve-taken/enforcement/

[ascorbic]

From what I can see, noe of the fines use the GDRP. They're all for pre-May 2018 breaches, so use the old DPA.