Not a lawyer here, but from my naive understanding: HELL YEAH! I mean, it only works from Europe, but every company has to nominate a contract for GDPR inquiries. Once they received that inquiry, there is a mandated deadline. If they fail to comply, the data protection authority can fine a portion of their revenues (not profits). Please take my info with a grain of salt as I haven’t verified them, but that is how I understand our system.
Not to forget that around 70% of the revenues cone from a single, non-disclosed, customer. My wild guess: it’s Google…
EDIT: And they just significantly reduced their expenditures for Software Development…