[jlokier]

In the UK, BA was fined £20M recently, although that was for egregiously failing to protect customer data.