The photo has been used for illustrative purposes.
ICO proposed the fine on Monday, months after BA revealed it had been the victim of a hack. The scam saw customers diverted to a fake website where credit card details were harvested by the attackers.
The ICO proposed a penalty of £183.4 million, or 1.5% of British Airways' 2017 worldwide turnover, for the hack, which it said exposed poor security arrangements at the airline.
It comes about a year after European Union member states began implementing the most sweeping change in data protection rules in a generation.
"People's personal data is just that - personal. When an organisation fails to protect it from loss, damage or theft it is more than an inconvenience," Information Commissioner Elizabeth Denham said. "That's why the law is clear - when you are entrusted with personal data you must look after it."
The General Data Protection Regulation, or GDPR for short, is designed to make it easier for EU residents to give and withdraw permission for companies to use personal information — but also forces companies that hold data to be accountable for looking after it. Authorities can fine companies up to 4% of annual revenue or 20 million euros ($22.5 million), whichever is higher, for breaching the rules.
The Information Commissioner's Office says its investigation of BA found that "poor security arrangements" compromised login, payment card, and travel booking details as well as name and address information.
The parent company of BA, International Airlines Group, said it would fight the proposed fine. It has 28 days to make its case in the first step of the process, which could take some time to complete.
"We intend to take all appropriate steps to defend the airline's position vigorously, including making any necessary appeals," said IAG CEO Willie Walsh.Associated Press
"The final touches are coming together for the airline's return ahead of the first flight on Sunday (June 2)," British Airways said in a statement. It will launch a three-per-week service to London Heathrow, it said.
The three-flights-per-week service will be operated with Boeing 787 Dreamliner aircraft and will serve the Pakistani capital’s main international airport.
Airlines including British Airways, Qantas and KLM said they were suspending flights over the Strait of Hormuz in line with a ban by US authorities, after Iran shot down a US drone.
The Ports Police Station of the Dubai Police issued 721 violations against beachgoers for flouting Resolution No. 38 of 2020 issued by the Attorney General of the United Arab Emirates on enforcement of penalties for violations following Cabinet Resolution No. 17 of 2020 to contain the spread of the coronavirus, COVID-19.
The Dubai Criminal Court ruled that a European woman, 19, be sentenced to two years in jail and fined Dhs50,000 to be followed by deportation after being convicted of importing over 4 kilogrammes of narcotics via Dubai Airports.
The Dubai Criminal Court sentenced a Gulf citizen to one year in jail to be followed by deportation. The Gulf citizen was convicted of stealing Dhs1 million from an Asian by coercion in a fake bag deal.