[msdz]

You forgot about the best part, in terms of the “GDPR threat” effectiveness:

Fines can be up to €20 million or 4% of global revenues…, _whichever is greater._

[brewdad]

“Up to” is doing a lot of work here. I’d imagine few companies ever pay anything close to the maximum possible fine.

Just like my state law says simple littering can be punished by up to a $6500 fine. Most people get a warning or maybe pay a fine of under $100.