The Sanctioning Regime of the GDPR and its Implementation in National Legal Systems: The Cases of Italy, Ireland, and Portugal