The British Airways Mage Cart hack led to a hefty £183m fine for not following GDPR policies. Although we don't know exactly what happened, this hack has led to important lessons about website security.