If you don't obey, the penalties start at 20 000 000 000 000 000 000 000 €, 400% of your income and your firstborn. They will be evil, disproportionate and diabolical. The supervisory authority will not take into account silly things like "the nature, gravity and duration of the infringement" or "the intentional or negligent character of the infringement". That wouldn't be fun. In particular, there is no chance that you will be issued a reprimand instead of a fine. The authority would do that if its mission were to protect citizens' privacy instead of destroying your business and helping big friendly companies like Facebook and Google, which the EU is well-known to love.
Do not leave your house before you have read every single EU law. If you don't the EU will find a reason to destroy your life. Especially if you live in a weak and unimportant country that is easy to bully around like the United States of America.
This is a price that we are being asked to be upset about. No, don't take the time to estimate what it would ultimately cost to replace it. Just see $LARGE_NUMBER and be upset.
What does this mean? Notes appears to have fairly regular updates every 3-6 months.
That could easily be an interpolation on my part, though. I tend to just assume that all critical infrastructure built on Notes is poorly-maintained in the same way that I tend to just assume that all critical infrastructure built on Microsoft Access or Excel is poorly maintained. (I'm sure there's some well-tended stuff out there, it's just being kept hidden from me for some reason.)
If you put it that way and see it that way, it will be impossible for you to understand what businesses like these do beyond just text rendering.
However, admittedly I run a variety of ad-blockers because newspapers have long abused my bandwidth with grossly inefficient advertising. But the penalties for violating GDPR are so great that it isn’t worth the risk (even if you are doing everything correctly, you still have potential international litigation expenses just to defend.)
Just curious, who should pay for the stories you read on newspaper websites?