A recent privacy penalty case has demonstrated the importance of maintaining strong cyber governance during mergers and acquisitions, Grant Thornton has said.