Why would you need lawyer fees? How is GDPR complex?

It literally is:

- you only store data you require to run your business

- you delete data if customer requested deletion

- you give the customer their data if they ask for it

If your profitable business is built upon selling customer data wholesale to third parties, then good riddance.