"but we do have some european customers"
The entire point is, NO you can't just ignore GDPR. Your lack of action toward compliance is negligent.
The entire point is, NO you can't just ignore GDPR. Your lack of action toward compliance is negligent.
I don't comply with laws from many other jurisdictions either. Should I start applying censorship laws for China and Saudi Arabia too? Why should the EU be special?
Anyone not up to shady activity can afford to wait for the case law and best practices to settle before doing anything.