A 55,000-euro sanction over professional PEC records shows how registry transfers can become a privacy and compliance problem long before anyone talks about a breach.