As someone responsible for implementation -- yes, we are probably erring on the side of caution too much, but "probably" doesn't cut it with the potential fines

As someone responsible for implementation -- yes, we are probably erring on the side of caution too much, but "probably" doesn't cut it with the potential fines on the line. -How big is "probably? 5% chance? 0.01% Chance? -Maybe they will be lax on cookie policy slipups but not on purging delete requests from backups, how are we to know on May 26? -Maybe they will only investigate the big public giants, or maybe they will respect maliciously-intented complaints from competitors? This is why, for example, Delaware is the chosen state for corporations -- case law is settled and has a very predictable legal frame work. In the absence of data, its hard to know WHERE people will get the hammer.