First, that is the maximum. Second, no one scare mongered about the old maximum fines of £500k (which BTW were never used).

https://government.diginomica.com/2017/08/10/ico-maximum-fin...