That's how GDPR works. It's a percent of revenue or millions of Euros, whichever is higher.

It works great to actually regulate tech companies when they break laws.