GDPR's tool for punishing transgressions is fines: > For especially severe violations, listed in Art. 83(5) GDPR, the fine framework can be up to 20 million eu

GDPR's tool for punishing transgressions is fines: > For especially severe violations, listed in Art. 83(5) GDPR, the fine framework can be up to 20 million euros, or in the case of an undertaking, up to 4 % of their total global turnover of the preceding fiscal year, whichever is higher. > “the concept of an undertaking encompasses every entity engaged in an economic activity, regardless of the legal status of the entity or the way in which it is financed” These services have no economic activity whatsoever, or if they do it's in the forms of donations to keep the lights on. Who do you propose that the GDPR hammer strikes?