Are Your Data Protection Systems Robust Enough To Avoid A Hefty Fine?