The fine is the largest issued by the Information Commissioner’s Office, but considerably less than the £183 million that the ICO suggested it could impose last year