Thanks. I operate the business from India and Indian government is unlikely to play with EU rules. Yes, hiring a lawyer is the correct thing to do but given my business does not make enough money from EU users I think it best to ask my EU users to use a VPN.