The very best case for Amnesia: veneer of GDPR compliance, maybe survive an audit.
Clients are buying plausible deniability, hedging their liability.
"Yes, we regrettably leaked sensitive data. But we followed all the rules. What more could we possibly do?"