Chinese firms, including TikTok and Shein, face EU GDPR penalties over data transfers to China, risking billions in fines.