As well as the potential financial penalties (the ICO has issued fines totally over # 2.67 m since 2010), the loss of trust and negative publicity can be ruinous to reputation and seriously undermine public confidence.
The answer to this which Thomas LJ emphasised is that the penalties to be imposed upon a company which fails to self - report will be swingeing if not potentially ruinous.