[bryanrasmussen]

I don't think that 4% is limited per annum, so that if you've paid 4% for case 1 in that year you pay out 0% for case 2+ in that year.

on edit: looking here https://www.i-scoop.eu/gdpr/gdpr-fines-guidelines-applicatio... it seems the second level of fines go up to 2% and are on a per case basis.