yes, VW was small fines. GDPR, especially for something like what is being suggested here, would be astronomical. Not saying nobody will do it, because humans are stupid.
to quote vincent vega re: the keying of his car, it would be worth having them do it, just to catch them doing it.