You don't even need experience with designing protocols to understand that. Real-life experience with how law is practised in some EU member countries is enough

You don't even need experience with designing protocols to understand that. Real-life experience with how law is practised in some EU member countries is enough. There are law firms whose sole business model is targeting small companies for not complying with certain regulations like legal notice requirements or disclaimers on websites. Only time will tell if this will be the case with GDPR but there definitely is a risk that this new regulation will be abused by dubious players.