W. Presthus and K. F. Sønslien, “An analysis of violations and sanctions following the GDPR”, IJISPM, vol. 9, no. 1, pp. 38–53, Sep. 2021.