Back when the GDPR was still pending, the consensus on HN was that there was nothing to fear because European regulators emphasize the spirit of the law, rather than beating people over the head with the letter of the law like American regulators do. Anyway, the law went into effect and some guy got fined just over $2000 for using CC instead of BCC on his personal mailing list of 150 people. There are a bunch more ex…
> Details on the 2k€ fine; the guy used his mailing list for harassment, the 2k€ fine would likely have also been issued prior to the GDPR as german privacy law is fairly strict.