Well in the UK the only criminal offenses under gdpr are around falsifying records to fool the regulator or attempting to deanonymise data. Both of which are punishable by a fine, not prison. And since you can't go to prison for a civil offense I think your comment is misguided.
Now if the state has got to the levels of your tasteless gas-chamber example, i don't think you need worry about data protection law
Now if the state has got to the levels of your tasteless gas-chamber example, i don't think you need worry about data protection law