If you want to get a feel for how GDPR fines vary, https://www.enforcementtracker.com/ keeps a list.