Brazilian General Data Protection Law: sanctions take effect