GDPR makes company liable for damages when breached.

That is why Tea did not operate in Europe.