Failure to comply with the General Data Protection Regulation can have serious financial consequences.