Non-compliance with the GDPR can be expensive. After all, the Data Protection Authority is authorised to impose fines of up to € 20 million or 4 percent of the worldwide annual turnover (whichever is higher). In addition, the directors of organisations that do not abide the rules run the risk of being held personally responsible when something goes wrong.
