There is another option. Just abandon any principle of data privacy and continue to sell their products (although GDPR in EU is an issue).