Yes, in the event of your business being liable for a breach of GDPR law, you may be subject to fines. Your insurance can cover any legal costs and penalties incurred.