With GDPR now in full effect, a huge number of UK businesses – large and small – are still leaving themselves open to data theft. For those companies that do fall victim to targeted attacks seeking valuable data, this could have very real financial repercussions under the GDPR framework