Can we stop with the "not complying means you're using data badly" meme? That's true for some, but most people who aren't the compliance officers for their comp

Can we stop with the "not complying means you're using data badly" meme? That's true for some, but most people who aren't the compliance officers for their companies don't know how much documentation and detail work this law involves that has nothing whatsoever to do with how the data is being used. Hell, I spent at least half my week sending out DPAs and guiding clients through the signature process. The GDPR has massive costs, and the 90% of companies that aren't villains are going to bear about 90% of them.