Your framing heavily incentivises malicious compliance. After all if the subjects of regulation coöperate to derail, delay, mislead the public and overload enfo

Your framing heavily incentivises malicious compliance. After all if the subjects of regulation coöperate to derail, delay, mislead the public and overload enforcement it's going to have a bad outocme by default. The main problem with GDPR is the scale of non-compliance greatly exceeds the size of any reasonable enforcement capacity, at least until enforcement catches up.