Can An Individual Be Fined Under Gdpr