This is just blatantly false. Source: I have had to work with regulators in various companies in reference to GDPR.

You are given ample warning if you're found to be in violation of GDPR, you are then also given instructions and guidance on what you did wrong and what your next steps are. Depending on the severity, you're given ample time to fix the issue. ONLY AFTER ALL THIS, which can take months, are you at risk of getting a fine, and they start off tiny, like 5 digits usually unless it's an egregious fuck up. If you continue fucking up, the fines escalate yes, but that's how it should work.

Let's not forget that none of this is something that got snuck into law out of the blue, it was known for years it was coming, and yet companies were STILL given leniency and ample opportunities to fix their behavior.

Guess what, no company I have ever worked for got a fine! Fancy that, almost like this is just FUD from people who only give a shit about making maximum money for the least amount of effort, screw the people we're harvesting data from amirite?

Also, jail? Name literally a single occurrence of this ever happening. I fucking WISH we'd be putting people in jail for the shenanigans they like to pull, but unfortunately it's only tiny fines for the most part.