"penalties of up to €1 million or up to 2% of the global annual turnover of a company"
Is this whichever is lower or whichever is higher?
I would assume the first, but it is not made clear in the article (and I don't have time to look it up myself).
In addition, I agree with the comment about "a right to be heard". Credit referrence agencies can be terrible, as can the people processing that data (when you apply for a loan, it is the bank etc. who decide whether to approve you, not the agency who suppilies the data). If you have withheld payment for a legitimate reason, you can end up with a mark on your credit history, and there's nothing you can really do to get it removed (quickly) unless the company agrees, and banks are less than sympathetic to such issues.