The largest possible GDPR fine is either 4% of the company's turnover or 205 million euros, whichever is greater.