The General Data Protection Regulation (GDPR) set an obligation for data controllers to protect users’ data. If you are the data controller and don't take adequate security measures to prevent a serious personal data breach, this could lead to a fine. The amount of the fine would be different for individuals, small and large companies, and depends on the annual global turnover. Use CookieScript to comply with the GDPR and other privacy laws.