Well, when they were talking about it becoming fully active not too long ago there was a lot of talk of fines being "the last resort" after warnings and whatnot -- then you have multi-billion euro lawsuits on the very first day the regulators could go after the corporations.
...and an attempt to grab some of the money from American corporations to the EU with billion euro fines.
https://www.targetmarketingmag.com/article/gdpr-lawsuits-tar...