I personally am not competent enough in this field to propose changes to GDPR that would better balance these constraints. Which is why it's so important that r

I personally am not competent enough in this field to propose changes to GDPR that would better balance these constraints. Which is why it's so important that regulators attack the problem in a holistic way - they are the only ones with the mandate, resources and expertise to do so. If GDPR in its current form makes it harder for small businesses to compete, in my opinion that makes GDPR incomplete, and we should pressure regulators to keep improving it. To achieve that, the first step is for us as a community to agree on the scope of the problem, which is why I'm trying to convince you :-)