I was implying that this was not complicated because I did not find it complicated. I have since learned that this was a lack of empathy on my part.
But I guess that the average lawyer knowledgable on GDPR issues would struggle to sort an array even in O(n^2) time so what do they know...
I.e. all things are simple to those that understand them!