I don't think it's just a money grab operation, or at least not from an EU-wide perspective. If they were after money, there is an endless supply of GDPR offend

I don't think it's just a money grab operation, or at least not from an EU-wide perspective. If they were after money, there is an endless supply of GDPR offenders, some very big ones with deep pockets and blatant, obvious breaches that can't be denied/explained away. It is incompetence coupled with individual greed - some people involved want a project to make themselves feel important and justify salaries/promotions while not doing anything meaningful for the privacy of Europeans (as mentioned above, there are much bigger fish to fry than ChatGPT). Not to mention, OpenAI's potential breaches of the GDPR aren't as clear-cut as some others, so this guarantees years of salaries, while an open and shut case may only yield months of salaries as the outcome is reached pretty quickly.