Comment by inglor_cz

In practice, I haven't seen a single GDPR-related investigation, though.

The Czech ÚOOÚ is very lax about this, or maybe understaffed.