When a company based out of the US mishandles data from EU citizens in the UK, that tends to take a while.
Sorry, you might have misunderstood my point. The long processing time is “fine” if it happens at all. The issue I’m trying to bring up is that in most cases these acts end without real consequences or punishment, so any greedy newcomer repeats it.
Example of what I’d like to happen: Euro Parking contract will not be renewed, and the company will be banned for 10 years to have any contracts with TfL or any other agency.
Set precedent by law, not just a slap in the wrist, so they think twice instead of writing it off as a business expense.
Personally I am a big proponent of introducing a corporate death penalty for particularly severe crimes of corporations, as in, the corporation gets dissolved, every employee gets fired and every asset gets auctioned off. That might convince some more employees not to silently watch when they see illegal things happen internally.
… or it might incentivize more employees to cover up those illegal things happening because they don’t want to get fired.
