Suing you directly will not fly in the EU (maybe in the UK, but that is only going to be an issue for 1 year or so).

I suspect the DPA will start with a letter, where you will need to explain your current practices.

Then, nothing more happens (if you are mostly-complind and good-willed). Maybe you will get some written instructions to better yourself.