Brazil have his own version of the GDPR, is based on the the EU version with the necessary adaptation on Brazil legal parameters.

Some articles even say the fine can be charged over a percentage of the profit.

Source: i did my undergraduated thesis over it, on law school