Frankly, I think higher fines and more aggressive fining would even further deepen the business moat that mega businesses are already developing over small and medium.
The article already describes how the current regulatory regime boosted Google and big players 20-40% directly at the cost of small and medium (not in the top 100 or top 50) sites.
Frankly, I think European countries should just take the China approach and ban American companies because there isn't going to be a regulatory structure that works here, and they're only going to hurt their domestic competition by playing this stupid game.
Also, deep and hearty guffaw from me regarding "the business moat is irrelevant". Thinking like that is why American companies dominate European tech and not vice versa, just saying. Thinking like that is why domestic competition just took a 40% hit in Europe as the business went to largely American firms. 40%!
You can always charge small companies more than the big ones. Also: witness my world's tiniest violin.
And yes, if that doesn't help, absofuckinglutely block them.
They will give you warning and time to fix it more than fine you. A fine is solution of last resort, after you burned them and proved you can not be reformed.
"89,271 data breach notifications"
Very odd.
* €55,955,871 in fines
* €50 million of which was a single fine on Google
Those are a joke. Considering what's going on, those values should be orders of magnitude higher.