For most business owners, the term "GDPR" conjures images of cookie banners and consent forms. That view is incomplete, and in practice, it sends attention to the wrong place. The most severe penaltie...