[atoav]

I know that the fines are a percentage of global revenue. And I am totally on board with this. I wish we had dynamic fines like these in more areas of society.

The other option would be to have fixed fines that Google et al. pay out of their small change, while it absolutly would torch their small competition.

Sure, they could also jail CEOs for this. I would also be for that.

If a fine doesn't grow with the income it is a fee. So if you want a corporation to follow your law, it needs to come with a fine that motivates those in charge enough to follow it. Money is the soft option there.

It is totally possible to run websites in compliance with GDPR. I built multiple that require no consent whatsoever, because guess what: No personal data is collected, where it is not absolutely technically required.

For me as an EU citizen the GDPR turned my data-related communications with companies from essentially begging into the void, to actually getting a response.