SANCTIONS AND FINES IN CASES OF PERSONAL DATA BREACHES