So, for a one-person startup, €20M means game over.
https://danuker.go.ro/gdpranoia.html#fines
The combined amount of fines across all companies over the GDPR's entire 4-year lifespan is just 1Bn.
If the lower don't suffice, we will get closer & closer to the maximum.