[niko001]

You're mixing up the member states' enforcement (4% of worldwide turnover or €20 million, whichever is higher) and civil suits. There are law firms that send out thousands of cease and desist letters (which is a civil action) based on automated searches for mistakes. It absolutely makes economic sense for lawyers to pursue out-of-court settlements from businesses if it's mostly automated.

[GordonS]

This is just nonsense. I don't see how the GDPR possibly allows civil actions for infractions, doubly so for countries outside the EU.