The problem is law doesn't fine for doing bad things, it fines for breaking the law which is not exactly the same.
In my previous company for a project we had to hire lawyer for more than a week just to determine if we were breaking law, even though the site didn't do any bad things by normal people standard.
In the end the suggestion was to just slap a consent form with consent rejection redirecting to some other site, which didn't made sense to me, but yeah that's what the law says.
