What key element of regulations, like the European Union’s GDPR, drive organizations to include them in their overall assessment of risk posture?

The fines that can result from violation or infringement of regulations like the General Data Protection Regulation (GDPR) can have a significant impact on an organization, or could even potentially put it out of business. Due to this, organizations will track compliance with regulations as part of their risk posture.