Don't get me wrong but it sounds like you are applying a foreign logic to the EU system without understanding how these things usually work here.

I personally happily followed GDPR rules, so did many others. Making it generally a better place. That wasn't because of fines but because we now had a framework to follow to make the world a safer place.