GDPR and the EU AI Act have changed the scale of data compliance risk — up to personal liability for executives. Here’s how to build governance that holds up under audit.