The €525,000 GDPR fine against Locatefamily.com shows that non-EU companies are not outside Europe’s privacy laws. Any business processing EU residents’ personal data must appoint an EU legal representative. Ignoring governance requirements can trigger penalties, regardless of company size.