>>grabeh+(OP)
This is no hysteria.
Depending on where your company is located the sueing risk is really high. E.g. in countries like Germany there is a whole industry which lives from sueing companies and people and I can imagine that GDPR will open a whole new sueing market there.
In other countries like Austria you get first warned and then sued on big GDPR violations which is a much better solution.