On enforcement, there is a reason that GDPR sets the penalties at global revenue, not localized revenue, because if you don't do that, there's very little incentive for structural change. I think that's a cue on where we need to go on the penalty side.
On September 25th, 2018. See this statement in context.