> GDPR compliance can be extremely expensive to implement...
Bullshit. It's trivial to implement. Don't store my personal data. Done.
It may be extremely expensive to store and process my personal data and remain GDPR compliant, if you insist on doing that. And admittedly it may be expensive to store and process others' personal data while excluding EU citizens from that mechanism. But the blanket statement "GDPR compliance can be extremely expensive to implement" is on its own extremely misleading in this context.
> And imagine working in an industry where data retention is legally mandated by other jurisdictions...
Perhaps, but this is not relevant to a news organisation publishing a general article online from the USA, where (AFAIK) there is no such data retention requirement in any jurisdiction within the USA.