This definitely seems like a likely outcome, especially considering how the world has responded to GDPR: ignore it if you're out of the EU or throw resources at

This definitely seems like a likely outcome, especially considering how the world has responded to GDPR: ignore it if you're out of the EU or throw resources at the problem to meet a bare minimum requirement (and cross your fingers) if you're in a country where it can actually be enforced.