Companies that don't take security seriously enough could be hit with multiple fines from different regulators
Critical infrastructure providers could be hit with a double penalty for a data breach where new EU laws coincide
Online marketplaces and search engines as well as energy, water and transport will be required to toughen up