I read the ICO article and discovered the GDPR applies unless it doesn’t and I can refuse to act unless I can’t and I can charge fees unless they don’t want me to.

I still have no idea what to do exactly. I don’t really think it is my responsibility but I live in a country and operate in another country where laws this vague are unenforceable.