A flower shop owner who runs his own website off a laptop in his shop unattended but plugged into his DSL using Microsoft Personal web Server and Windows 98, wh

A flower shop owner who runs his own website off a laptop in his shop unattended but plugged into his DSL using Microsoft Personal web Server and Windows 98, who records customer data in that form without explaining to his customers that he's a fucking idiot deserves what he gets. It's a shame perhaps that the European courts probably won't bother with him. But the photographer that hosts her website and help forms on wix[1] isn't going to have any problems. The local restaurant using viewtouch PoS and a facebook page isn't going to have any problems[2]. [1]: https://support.wix.com/en/article/general-data-protection-regulation-gdpr https://support.wix.com/en/article/general-data-protection-r... [2]: https://www.facebook.com/business/news/facebooks-commitment-to-data-protection-and-privacy-in-compliance-with-the-gdpr https://www.facebook.com/business/news/facebooks-commitment-... Very few real people will have any problems, because the GDPR is fundamentally about tradeoffs: If you have a lot of personal data, you need to protect it and inform the subject what you do with it. If you can't afford to protect it and think that the subject wouldn't want you doing what you're doing with their data, then you probably shouldn't have that personal data.