The company would have to pay a fee to the copyright owner plus some extra. I am jaded from practice around GDPR where the thinking of companies goes along the

The company would have to pay a fee to the copyright owner plus some extra. I am jaded from practice around GDPR where the thinking of companies goes along the line: if we are caught, we will pay extra, but now we make big cash. And who knows, maybe we won't get caught.