[sadfklsjlkjwt]

Note I am not suggesting that this will happen with this particular company. I don't understand this case well enough to comment on it.

In a hypothetical situation of a non EU company significantly breaching GDPR this could be resolved by e.g. seizing all funds belonging to the company in EU banks or in extremes by finding the company's board in contempt of court and then arresting and imprisoning them if they ever travel to a country with a extradition agreement.