GDPR violations aren't something a troll can sue you over. All a troll would be able to do would be to raise a complaint with their national entity responsible for it, who analyzes the complaint and then takes action themselves if deemed appropriate.

But legal trolls have an array of legislation to attack you with. GDPR is just the latest one.

GDPR is an easy one because it's fairly ambiguous and doesn't yet have precedent

GDPR is for the most part making explicit things were implicit in the pre existing EU legislation, many of which have been subject to EU court rulings. There is a ton of precedent.

yes but the argument is that one hit from the gdpr can kill you and maybe even most likely will even if you're in reasonable health, and most other legislation you can survive a few hits if you're not already critical.

No. The first hit from GDPR violation will be from the regulator, asking if you actually are in violation, and giving you advice about how to come back into regulation.

I didn't say the argument was correct, but people probably also don't want to deal with the regulator for their little side gigs even if it's only the regulator asking questions.

Agreed. GDPR simply made me aware of that once again. I still feel the trolls should have minimal amount of attack vectors to small businesses, though.

Why would legal trolls use GDPR? What's in it for them?