If your organization is required to appoint a DPO and you don’t comply, it could have significant financial and reputational impact.