This is exactly why we get GDPR. Usually what happens when rules and guidelines are not followed, there will be stricter rules with higher penalty.