Which could easily happen if the person levying the fine doesn't like you. In some countries the data protection agency has a whopping dozen to two dozen people working at it total. In other words, if it so happens that you don't get along with them then there's nothing stopping them to be harsher on their enforcement.
You can't ask them for advice either. They'll tell you that they're there for enforcement.
My local level of government has this less than two dozen people working in the data protection authority. That is why I'm worried. They are the ones that will be enforcing this whole thing here.
I'm not saying there is no due process, but it definitely is massaged in some parts of it. In the country I mentioned according to the statements of the Ministry of Justice the conviction rate is 99%. Out of 100 cases that go to trial only 1 gets a 'not guilty' verdict.
I was reading straight from the document. I never said minimum either.
This is straight from Article 83 of GDPR:
"Infringements of the following provisions shall, in accordance with paragraph 2, be subject to administrative fines up to 10 000 000 EUR, or in the case of an undertaking, up to 2 % of the total worldwide annual turnover of the preceding financial year, whichever is higher"
Moreover the next fee level is: "20 000 000 EUR, or in the case of an undertaking, up to 4 % of the total worldwide annual turnover"