Recent ICO enforcement actions under UK GDPR and the Data Protection Act 2018 show a pattern: password failures cost UK ...