And you really don’t want to screw around with GDPR:
Non-compliance with an order by the supervisory authority as referred to in Article 58(2) shall, in accordance with paragraph 2 of this Article, be subject to administrative fines up to 20 000 000 EUR, or in the case of an undertaking, up to 4 % of the total worldwide annual turnover of the preceding financial year, whichever is higher.
If this checks out, they may be in disrespect of a bunch of privacy laws including GDPR.
And you really don’t want to screw around with GDPR:
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e6226-1-1
4% feels really low, I wish the EU set it to like 25%
Looks like it checks out. https://mstdn.games/@chris/110553477682106144