One can hope that the store operators will also be heavily fined for their apparent failure to protect their customers' information from infosec threats. Show them teeth, GDPR.
For those who do not read the articles, in the store they sold more than music, they are not neo-nazis but probable neo-nazis or former neo-nazis. It's not just the names either, it's also their phone numbers, addresses, and social security numbers.
Screwing neo-nazis can be fun, until some of the innocent ones get harassed and their lives ruined, or when anyone on the list ends up tortured and/or killed.
ahh yes because torturing and murdering Neonazis happens so regularly. Except it doesnt. It is the Nazis who commit violent atrocities against minorities. The Nazis arent a persecuted minority.
If someone on that list has denounced his former ways he can do so publicly too. Although that actually gets them in danger, but not from the left but their former Neonazi friends. They love to threaten and attack people they consider as traitors.