Instagram’s $402m fine is a sign of what’s to come, say data privacy experts