Could you afford a financial data GDPR breach