Action taken to enforce data protection law in the EU has highlighted the focus of regulators on the measures businesses put in place to protect the security of systems and data.
https://www.pinsentmasons.com/out-law/analysis/eu-data-protection-enforcement-cyber