It may affect the handling of personal data within the EU, data transfer procedures, and lead capture processes and documentation. Personal data includes personally identifiable information, such as names, telephone numbers, IP addresses, and email addresses. Therefore, the more types of data processed, the greater the risk. Breaching the GDPR can include fines of up to €20 million.