What will happen if i don’t follow the GDPR best practices ?