The size of the penalties will depend on the infringement and size of the company fined.
That's higher than the fines possible under the GDPR, Europe's strict digital privacy law. Companies face fines of up to 20 million euros or 4% of annual global turnover for GDPR breaches.