That’s great news.
The ICO’s like many regulators have an issue-driven enforcement policy.
If there is a significant data breach or numerous complaints then enforcement action may well follow.
If this happens, the ICO will ask how you demonstrate compliance.
If you can’t you will have no excuse and have to face the consequences which more than likely will include reputational damage.