Recent ICO enforcement actions under UK GDPR and the Data Protection Act 2018 show a pattern: password failures cost UK businesses millions. Poor credential management, missing MFA, delayed breach ...