>A company has to be over 250 employés to be GDPR compliant.

That's not true.