$20 million isn't the minimum fine. That's the maximum fine for companies with under $500 million in annual turnover. You aren't going to get the maximum fine

$20 million isn't the minimum fine. That's the maximum fine for companies with under $500 million in annual turnover. You aren't going to get the maximum fine unless you are doing something egregious. Collecting the default Apache logs and not using them for anything malicious isn't going to get you the maximum fine or likely any fine at all.