I worked at a call center in the US and even we were drilled in training on GDPR fines and penalties... Prety steep, like $10K a day and more...