I don't understand this thinking. The gdpr is law since years, this is SIMPLY a case of a company not respecting it and paying the price, there is literally nothing else going on