You hope. Any proof in the text of the law to back that up? From a risk management perspective, doing any business in the EU is dangerous because even if you are doing it right, the potential exists that you’ll have to defend GDPR claims. That’s a real liability. Of course, as I have said before, that’s probably by design since Europe, especially France, has a real inferiority complex with foreign tech.

Examples: France suing Apple over developer fees. France blocking the sale of DailyMotion to Yahoo. The war against Uber with the simultaneous promotion of BlaBlaCar, the attacks against Apple for taxes on income that wasn’t even earned in France, the collective freak-out over AirBnB while subsidizing Gites de France.

My point is that exposing yourself to the risk of a European money-grab is too high. Besides, who benefits from collected fines? Governments. Those fines don’t get paid to the aggrieved party, they get paid to the government. Governments have an incentive to levy fines on foreign companies, with very little downside — European jobs aren’t at risk.

The attack surface is just too great to be using “hope” as a strategy.