But this is not about people recycling something wrong on accident, it's about companies not doing so on purpose because it saves them money.

GDPR was never about normal people, it was about companies. Trying to reframe it like it's about people is disingenuous. It is supposed to protect people, yes, but from people like you company owners and executives and others who think "screw everything, I'm looking at my bottom line".

You ignored the example with food, so I'm sure you already know this.