I agree, it was previously quite pittiful and definitely not a deterrent. Qith GDPR, organisations can be fined up to €20 million or 4% of the organisation’s total turnover (whichever is greater). 4% of of Facebook's total turnover is a HUGE amount, so if you ask me GDPR might be what they need to keep on the right track.