> what part of what you linked to says they won’t use their discretion to assess the maximum penalty in most situations?

There's at least twenty years of regulation under existing DPA law, where the maximum fine has never been asked for nor applied.