"The GDPR explicitly allows any data processing that is strictly necessary for the service - but using the data additionally for advertisement or to sell it on needs the users' free opt-in consent," said noyb.eu in a statement.
"GDPR is very pragmatic on this point: whatever is really necessary for an app is legal without consent, the rest needs a free 'yes' or 'no' option."
It is very obviously the fine per incident, and can be accompanied with daily fines until resolution. This is definitely not a periodic fine to be paid every year to forego compliance.