I remember many people on Hacker News being appalled that it could go as high as 2% of global revenue, and that others here pointed out that 2% global revenue was merely the maximum, and that most fines — especially the initial ones or for relatively minor breaches — would be much lower.