GDPR is legislation enacted by the European Union in May 2018, outlining new data guidelines which forces data suppliers to comply with strict regulations. It’s a move that’s cleaned up the industry and forced a lot of the businesses that smeared the industry’s reputation out of business.
There’s never any excuse not to comply to GDPR standards. If you find a non-GDPR compliant business, don’t buy data from them. Compliance is the responsibility is on the supplier.