Some of the specific requirements that companies must meet include implementing data processing procedures that comply with GDPR, encrypting personal information, and restricting access to personal information. If anything does not meet the GDPR requirements, you could be fined up to 4% of a business’s global annual revenue or be placed in financial sanctions by regulators in Europe.