The GDPR law in the EU allow us-companies to be fined: https://community.spiceworks.com/topic/2007530-how-the-eu-ca...