In reply to Bob.

I do worry about folks in the WordPress community being dismissive of GDPR, they are either ignorant of what it actually is about or don't care about privacy and web security.

"Won't spend one dime" If you already operate in a way that protects your customers privacy and security why would you need to? If you don't, why on earth would you announce that publicly?