It is the second-largest GDPR fine to-date, and deals with Instragram's failure to protect children.
From 2018-2020, users were forced to consent to a new privacy policy to continue using the app - which the Norwegian regulator has ruled as invalid
Messages from the Department of Health and Social Care contain personally identifiable information, warns Kuan Hon
Travel firm delayed reporting the breach by 22 days, exceeding the 72-hour limit
Already under fire for its multi-billion pound cost, the government's Test and Trace programme may also have breached GDPR
The government skipped essential data privacy impact assessments in its rush to get the system up and running