It doesn't matter how much you ramp up the fines if there's no willingness to enforce them. GDPR's potential fines were already adequate but the actual fines given out were laughable.