Having worked in multiple EU companies that went to great effort to comply with GDPR and also had legitimate issues that needed to be resolved under threat of real fines, this is just an incorrect take.