For example the GDPR says in Art. 83(5) [1]:
> Infringements of the following provisions shall, in accordance with paragraph 2, be subject to administrative fines up to 20 000 000 EUR, or in the case of an undertaking, up to 4 % of the total worldwide annual turnover of the preceding financial year, whichever is higher [...]
(An "undertaking" in EU law speak refers to any entity that is engaged in economic activity, regardless of its legal status or the way in which it is financed.)
EDIT: formatting