I mean, this is one of the few cases where you actually can reasonably say that you might not have to give a damn about GDPR. Assuming this is in the US, there’s a high chance that no EU citizen lives in that building, and thus GDPR doesn’t apply.
(Yes, I know this didn’t actually happen)
In that case it becomes a violation again. At least according to the law