Data protection penalties hit £6.5m post GDPR