Financial services firms can hedge the risks of significant data breach claims being raised against them under the GDPR by investing in staff training and avoiding pitfalls highlighted by a major regulator
https://www.out-law.com/en/articles/2018/september/financial-firms-can-hedge-data-breach-exposure-risks/