Under the current law you already have to pay up to 500€ for a request. That would be a very costly DoS attack.