Comment by shadowgovt

> Customers understand the significance of different kinds of risk.

Customers do; the law does not. The GDPR introduces unintended consequences.

> Surely, even the lawyers in charge of minimizing liability would agree: it is better to fail by keeping customers accounts then to fail by deleting them.

Not at all. Those in charge of enforcing the GDPR are heavily incentivized to assume the opposite of that. Google accidentally losing customer data is a win for privacy as far as the law's intent.