Digital agency, comply now !

What risks does a digital agency face by not complying with GDPR ? What creative solution is there to comply with GDPR ?