According to the third edition of the DLA Piper and Aon report “The Price of Data Security,” GDPR fines are not insurable in Austria, Belgium, Bulgaria, Cyprus, Denmark, Finland, France, Ireland, Italy, Latvia, Luxembourg, Malta, Portugal, Romania, Slovenia, Spain, Switzerland and the United Kingdom.