GDPR enforcement is finally getting teeth in the last 12 months.