This was damages paid to the individual.

(lets talk law on damages)

Many European countries have /the principle of the prohibition of enrichment/ within the law of damages. The injured party should receive compensation for the actual loss or damage suffered, but should not end up financially better off. The goal is to make the victim whole. Damages are not punitive.

There is separate case in EU against Google that can result severe penalty.

Maximums are high: For severe GDPR violations the penalty can be up to 20 million euros, or up to 4 % of total global turnover of the preceding fiscal year, whichever is higher. For less severe violations fines of up to 10 million euros, or up to 2% of its entire global turnover of the preceding fiscal year, whichever is higher. Turnover is from _undertaking_, meaning every corporation or natural person who is engaged in the activity (you can't avoid penalty with financing or corporate structure).