Is compliance a reason or an excuse?

When a legal tech project stalls over GDPR, the law is rarely the reason. What data protection actually requires, and what the objection often hides.