GDPR enforcement begins – fines from the ICO and CNIL