>>Anyone can sue you over any civil law. Then teh courts decides. GDPR is not magically different. This is a straw man.
Yeah, but in this case that "anyone" is not spending a dime of his own, instead the limitless resources of EU will be coming after you. By the time the court decides, virtually any small company will bankrupt.
Why the assumption that the EU won't side with you, and will definitely only side with the person making the claim? Certainly, if you're compliant, there's a very good chance that you'll get off the complaint, yeah?
The limitless resources of the government is never applied to all laws. Regulatory institutions are budget constrained like the rest of us, and will prioritize what it considers to be the worst cases.
Yeah, but in this case that "anyone" is not spending a dime of his own, instead the limitless resources of EU will be coming after you. By the time the court decides, virtually any small company will bankrupt.