That's not true. The £42m fine I mentioned was levied by Ofcom for a breach of compensation requirements by BT OpenReach. "The penalty is a result of an investigation by Ofcom into BT’s network arm, Openreach."
More details here
Neither the written press nor BT Openreach operates in a regulatory vacuum. The press is monitored by IPSO and telcos are regulated by Ofcom. You could well argue that IPSO is a pretty weak regulator but Ofcom isn't - it fined BT £42m earlier this year - and has levied fines regularly against...
That article's wrong - the maximum fine for non-compliance with GDPR is 20m euros or 4% of total global revenue. The fine is set according to the nature of the breach and mitigating circumstances so we don't know what the fine would have been, but several lawyers I've spoken to about this say...