That would allow all those students to exercise their GDPR rights against Proctorio and their university. Probably just takes a couple hundred to completely overwhelm Proctorio and cost them so much money that it makes more sense to drop the small Dutch market. Or to get them in a lot of trouble if they refuse to give all students access to all data they have.

Will take the privacy regulators a few years, justice moves slow. But if I was a Proctorio shareholder I would be very very unhappy if my company got stuck in years of unresolved legal issues with unknown (and high) potential fines.