← Back to context

Comment by mikeyouse

11 days ago

Several of the fines have been in the hundreds of millions of dollars - and while not crushing to Oracle, that's actual money that will definitely change behavior.. https://www.enforcementtracker.com/

8 comments

mikeyouse

Reply
cataphract  11 days ago

Many of these are against public bodies... Hundreds of pages with lawyers back and forth for in the end money going from one part of the government to another...

ziddoap  11 days ago

Nice, thanks for the link!

The largest fine ever issued is about 2% of Oracle's 2024 revenue. If we average the top 5 fines ever issued (this breach surely wont result in the largest GDPR fine ever), it'd be about 1% of Oracle's 2024 revenue. So, between ~3.5 and ~7 days worth of revenue, if we're lucky and get a top 5 GDPR fine?

I'm not sure that is in the "definitely change behavior" area yet (in fact, I'm confident it is not), but better than I thought.

  • piva00  11 days ago

    7 days of revenue, 1 whole week out of 52 that all of your workforce production went to pay a fine? Yeah, that's quite noticeable for a corporation.

    • ziddoap  11 days ago

      If this breach receives a fine in the top 5 fines ever issued in the entire history of GDPR enforcement.

      Don't forget to subtract out the money they saved from reduced investment in security over that time, as well.

      Noticeable? Sure. Nowhere near noticeable enough, though, in my opinion. Especially if we're serious about it and recognize this isn't going to be a top 5 fine.

      3 replies →