Non-compliance with GDPR can result in severe penalties, including fines of up to 4% of an organization's annual global turnover or €20 million, whichever is higher. For healthcare providers and researchers, non-compliance can also damage their reputation and erode trust with patients and research participants.