The penalties given are a max figure. A small business isn't going to be fined 20 million euros for slipping up. In fact, in the UK the ICO have stated that the

The penalties given are a max figure. A small business isn't going to be fined 20 million euros for slipping up. In fact, in the UK the ICO have stated that their preference is to avoid having to impose penalties as much as possible.