&gt; A company wont be held accountable if an employee goes rogue and leaks it, that employee will be. Lets be honest here corporations aren't held accountable for shit.

You probably have this mindset because you're used to how things are run in the US.

The EU's regulations have some serious bite, and are enforced.

https://www.finextra.com/newsarticle/30698/eu-banks-could-face-fines-totalling-47-billion-in-the-first-three-years-under-gdpr