Is £400,000 enough of a disincentive for a large corporate to avoid a data breech.