If it's already not allowed to use data in this way - thus the fine - what purpose would allowing and revoking the right to do so serve. It's already prohibited.
in other words if you lose the right to process or possess the data at all.
“corporate death penalty” kinds of regulation needs to happen more often