CNIL, Data Protection, GDPR Operational reality under GDPR: Insights from January 2026’s largest fines What recent high-profile GDPR fines in France and Spain reveal about security, transparency, and the cost of non-compliance Naomi Grossman February 2, 2026