Legal Fines for Online Businesses of up to EUR 20 Million under the new Data Protection rules