The Information Regulator has fined the Department of Justice and Constitutional Development R5 million after it failed to comply with an enforcement notice requiring it to improve its cyber security software following a 2021 data breach.