Primarily the fines are for not following GDPR rules I believe. The fines are well explained in the article below https://www.i-scoop.eu/gdpr/gdpr-fines-guidelines-applicatio...