Member states will implement this into national law. So in the case they will need to implement a maximum of one year or more (but not less). The final law as applied by a judge will just read "punishable by a maximum of [i.e.] fourteen months".
If the max is one year, it can't be more?
At least that's how I read it, but it's confusing.
Oh look, now you've got me doing it to you. Drat.
I think people at Experian should have gone to jail, for example, for their incompetence and negligence in regards data breaches.
This isn’t complicated. If it’s the law companies should comply. Fines won’t make a difference to corporate behaviour but this Might.
>This isn’t complicated.
Not only is it complicated, it is deliberately complicated expressly for the purpose of making it impossible for justice to occur.