So, let's say that I receive this and do no comply. What should my "enemy" who sent this do next? What is the worst case outcome for me?
This assumes they can even do so; if there are national regulators who hold the same opinions that some HN posters do about Google and Facebook, there may be no definition of "undue burden" they are willing to accept.