Britain's Information Commissioner's Office said on Friday it has fined IAG's British Airways 20 million pounds (US$25.85 million) - its biggest such penalty to date - for failing to protect personal and financial details of more than 400,000 of its customers.