Is this GDPR territory with fines up to EUR 10 million or 2% of a company’s global annual turnover? Not sure what are the fines for some random person though