Involved in this at work where it is veryt relevant but also indirectly involved with a small music association who are struggling. Not helped by the lack of sensible info for small orgs etc.

To be fair, 'our' scenario is unlikely to be too much of a worry for the powers that be but I don't think that is a good excuse and the idea of multi-million fines is a worry.

We use Mailchimp for our notifications (it has subscribe/unsubscribe options) and the only solution I can think of is to send out a 'final' message saying that the list is about to be cleared (i.e. immediately after sending) so you will need to resubscribe and giving a link to do that.

It's a great idea (I guess) especially in view of recent data misuse (!) but it is disproportionate for us 'minnows'.