Also, must be nice to live in a country where the regulator is as benevolent and reasonable as is described in this article.
I think it's ok for foreigners to be skeptical of this promise, as the article implies that this reasonableness is not encoded in law.
You have to change what you're doing to be compliant, but you don't know how. And for some aspects, no one knows how.
And GDPR actually has teeth. It's ripe for selective enforcement and other bureaucracy failures.