I think you're confused about what GDPR requires from companies. The whole thing is simply about not collecting data you're not supposed to need in order to pr

I think you're confused about what GDPR requires from companies. The whole thing is simply about not collecting data you're not supposed to need in order to provide the service, and whatever you do it must be opt-in. The only reason why a company needs to block a whole continent is that they've based their whole infrastructure on exploiting the user's data to such a level that they cannot provide their service without collecting and retain data they're not supposed to collect. As for "a lot of resources", Instagram and the L.A. Times should have enough resources to become compliant.