£500,000 is not exactly a fine for facebook. They probably spend more on tea bags. If GDPR had been in place at the time they could have faced a fine of 2% of turnover. That would have been a fine of $800m. That's a bit more of a fine.