Everyone seems to have latched on to this 20mm € fine part, but missed the surrounding paragraphs that require that fines are proportionate to the offending, and only to be used after, on in conjunction with other methods of enforcement.

It's most certainly not a blanket "Everybody who is not in compliance with the GDPR will get a 20 million Euro fine".