The introduction of the GDPR threatened big fines for data breaches, but last week is the first time we’ve seen them in action.