Cybersecurity, Data Protection & Privacy team leader Rafi Azim-Khan spoke to The Economist about a recent record-setting fine from the UK’s Information Commissioner’s Office for breaches of the EU’s data privacy laws under the General Data Protection Regulation, or GDPR.

The fine is in response to a large breach one year ago that compromised the personal data, including credit card details, of nearly half a million consumers. On July 8, the ICO announced a £183 million ($229 million) fine, the biggest ever imposed by the agency for a data breach and the first such fine since the GDPR was enacted, the publication reports.

Along with UK Data Commissioner Elizabeth Denham, Azim-Khan spoke to The Economist about the record-setting fine and warns that it will be the first of many large data breach-related fines for companies.

Denham echoed the warning in response to global news of the record fine: “People’s personal data is just that—personal,” she said. Companies should now expect to be hit with big fines if they break the rules, The Economist concludes.