As the deadline for the EU's new General Data Protection Regulation (GDPR) regulations gets closer, are companies ready to comply with the new rules? The consequences could be severe and are they proportionate to the potential misdemeanour?