Your organisation’s liability for individual damages if you don’t comply with the EU’s data protection law.
A range of sanctions, including suspension of activities and fines can be imposed if your company doesn’t comply with EU law on data protection.