Although these guidelines do not have a legal requirement, they are essentially enforceable. Any country that does not comply with the rules by the end of the allotted time will be blacklisted.
Common let's not believe everything that cointelegraph writes just to make their article a little spicier.
There are only two countries on the FATF blacklist and those, Iran and NK are not mainly there because of KYC or AML.
FATF is a cooperation force, it simply issues guidance, it has zero legislative powers.
How is this information with exchanges not going to interfere with gdpr in Europe?
Little, GDPR is about protecting personal data, not about preventing companies to collect or requesting it.
KYC works fine with GDPR, it does so with banks it will work with exchanges, some people have a misconception that with gdpr companies are not allowed to ask for personal information or store it, and that is not true.