Well yes, if you've built a business around illegally using personal data you may need to get a lawyer involved.

It would be better to get the lawyer involved when you start your business so you know you're complying with the law.

And almost everything in GDPR comes from existing laws (IN UK the data protection act and PECR), so if your breaking the law under GDPR you're probably breaking the laws that exist now too.