In 2018, the EU's General Data Protection Regulation (GDPR) aimed to deter blatant data breaches, imposing hefty penalties amounting to