Look at the long list of massive fines levied on the US tech giants for GDPR violations [1]. Every one of them consulted lawyers (and likely substantially ignored their advice).

[1] https://www.enzuzo.com/blog/biggest-gdpr-fines