GDPR set the tone for regulatory action — and the AI fine pushback to come | AI Sec Watch