Under GDPR, fines can be up to 2% of annual revenue (not profit) for "less severe" infringements. Facebook had $118 billion revenue in 2021, so that would be $2.36 billion. And I think the fines will repeat.
For more severe infringements, it's double that, so $4.72 billion. Which would be around half of profits for 2021.
