Which of the following statements regarding GDPR is NOT correct?

Question $5$ options:

Businesses that fail to comply with GDPR may face penalty up to $20$ million or up to $4\%$ of the annual worldwide turnover of the preceding financial year in case of an enterprise, whichever is greater.

Under GDPR$,$ any information that can identify a person such as name, phone number, username, IP address or location data, is considered personal data.

GDPR does not affect US business much.

GDPR is considered to give consumers more control of data regarding themselves.