I should have been more explicit about my point: GDPR compliance is easy and inexpensive for restrained good companies that care about privacy, troublesome and

I should have been more explicit about my point: GDPR compliance is easy and inexpensive for restrained good companies that care about privacy, troublesome and expensive only for companies that behave inappropriately, and an existential threat only for true scum. You are simply being forced to behave like you should have been behaving from the beginning of your online presence.