1. There is a time value of money so if those costs are high enough, the meager returns can be less than they can get elsewhere and thus they shouldn't do it.

1. There is a time value of money so if those costs are high enough, the meager returns can be less than they can get elsewhere and thus they shouldn't do it. 2. There are other ongoing costs to comply with gdpr outside of the server fees such as manpower to comply with gdpr requests, lawyer fees if they get sued and obviously fines if they lose any lawsuit related to it.