[jasonlotito]

> assuming you're sharing customer data. If you don't, there's nothing to do.

This is 100% not true and would be a violation under the GDPR. You need not share any data and if you do nothing, you'd be violating the GDPR.

> Sure, you have to comply with data requests, but if you don't store/share it... that's also trivial.

Nope, this is also not true. At least, it's not just "data requests."

You are in violation of the GDPR.

[anonzzzies]

If you don't have the data, it is trivial; you send an automated mail you don't store anything (of course if you really don't).