What if my company/organisation fails to comply with the data protection rules?

What if my company/organisation fails to comply with the data protection rules?

Can my company/my organisation be liable for damages?

Can my company/my organisation be liable for damages?