Here's What's at Stake for Companies That Don't Comply With GDPR