I am sure most of them are consumers and don't run their own websites.

The GDPR is even an issue for people running simple blogs and forums. Many public software for these don't even have the features for GDPR compliance.