Of all the GDPR-related talk out there, this topic has commanded most attention. And hardly surprising, when you consider that potential fines for non-compliance could be as high as €20 million, or 4% of the worldwide annual revenue, whichever is higher.