GDPR: Lose money if you comply, lose money if you don't