In regards to business activities you have another vector for potential data legislation headaches. That can be a security threat, data processing that is out-of-scope (or in breach of rights or consent) or even uncertainty about where your data goes and what actions are performed on it. This can lead to all sorts of problems.