The maximum GDPR fine is 4% of previous years revenue, or in the case of google $3Bn.
So, for a one-person startup, €20M means game over.
The combined amount of fines across all companies over the GDPR's entire 4-year lifespan is just 1Bn.
If the lower don't suffice, we will get closer & closer to the maximum.