[JoachimS]

And he is wrong. GDPR is Swedish law, and governments take GDPR issues very seriously. Every community must by law have a GDPR compliance officer responsible for handling issues and reporting them to the government.

There has been some quite public cases where government orgs, communities have been fined for GDPR violations. And these cases are of course also public so that can't be hidden.