Why GDPR fines keep hitting companies that thought they were compliant | Vulnox Blog