I don’t think it will ever come to a lawsuit, nobody would ever want that. Under the GDPR you must be able to delete content, and the server must communicate this to all federated servers. So in effect, there is already a legally binding agreement between all servers that this deletion request must be honored (for people physically in the eu), it’s just not.

lemmy servers are already breaking the GDPR if they don’t follow forwarded deletion requests from people in the eu. This would just effectively be an extension of this to data from all people.