Up to 4 percent of their global annual revenue if the EU finds out.

Violators of GDPR may be fined up to €20 million, or up to 4% of the annual worldwide turnover of the preceding financial year, whichever is greater.