Abhi then the consequences can be severe. For example, non compliance for GDPR where it can be proven - for example, your site is hacked and you have a data breach involving EU citizens - would attract fine of €20m or for times the annual turnover of any parent company - whichever is greater.
Similarly, non compliance can also be in the form of no privacy policy, no mechanism to opt out of emails, no methods to request or change data, etc.
