Despite potentially huge fines for non-compliance with the EU’s General Data Protection Regulation (GDPR), SMEs are more worried about the damage failure to comply will do to their reputations.
https://www.computerweekly.com/news/252441127/SMEs-more-worried-about-GDPRs-threat-to-reputation-than-fines