"If a lawyer comes claiming ..." This doesn't happen in Europe. GDPR will not be used for individual claims from lawyers. Especially independant developers have nothing to worry about if they act in good faith. The enforcers of GDPR in each country don't have enough resources to act on everything which means only the biggest companies have to worry about claims. Also, it's not the responsibility of the web developer to make a website/platform comply to a law. The client who pays you to make the website is responsible and can hire a jurist to tell the developer what the requirements of the product are.