Some people only care about actual consequences. Download all the data and send it, in the post on a flash drive, to the GDPR regulator's office and another copy to the medical licensing board because why not.

Hopefully. And I hope he wasn't dumb enough to remove himself.