Non-compliance with GDPR can lead to costly penalties described in article 83 of the GDPR act. The fines reach up to €10 million, or 2% of the company’s annual revenue.