> She had to go to Berlin data authority periodically and report status.

That seems more of a German bureaucracy thing rather than GDPR specifically.

The UK, which does still implement GDPR from its time as a member state, does not require this level of officiousness.