Yes, I quite agree that the prospect of success appears remote. They would have an arguable case for negligence regarding data inaccuracy though, so I wouldn't be surprised if they submit that as an additional claim and abandon the GDPR claim if that seems likely to fail.