Data breaches that arise after new EU data protection laws take effect but which stem from security flaws that were known about prior to then will be enforced under the General Data Protection Regulation (GDPR), the UK's data protection watchdog has said

https://www.out-law.com/en/articles/2018/january/fines-under-gdpr-wait-for-businesses-that-fail-to-fix-known-security-flaws-now-says-uk-watchdog/