Unless they don't audit you.
In which case you can continue not to care.
From my own experience talking with CEOs, I really think that will continue to be the case. If you're asking them to accept a large concrete loss now to prevent a hypothetical even large loss at some point in the future, they won't care.
The European Union. If you have any of their residents in that database, then you have about 3 weeks to fix that...