Question: what are the consequences of not following the data protection act?
Answer: The GDPR fines are much higher than the financial penalties under the DPA. An organisation can be fined up to 20 Million Euros or 4% of their annual turnover, whichever is higher, if they are found to be in breach of the GDPR.