The GDPR accounts for hefty fines for non-compliance (up to 4% of the company’s worldwide total annual turnover – capped at €20 million).