Employees shouldn't have access to unnecessary customer data anyways per the regulation. Maybe there is some work that can't be done without downloading data, which would maybe be forbidden if outside the EU, but ordinary programmers are okay IMHO.

In practice, there are tons of companies outsourcing customer support to India, entrepreneurs managing their ecommerce sites from Thailand, managers opening their Salesforce there, guys with Slack company accounts on phones etc...