GDPR is about protecting human rights. My personal info staying safe is non-negotiable prerequisite, and your 3-person startup making money is totally optional.

GDPR is about protecting human rights. My personal info staying safe is non-negotiable prerequisite, and your 3-person startup making money is totally optional. If you are unable to comply to GDPR then you shouldn’t be allowed to touch other people’s data. I won’t pity you for exactly the same reason I would not pity drug dealer complaining that his latest heroine delivery was intercepted by DEA. I think it’s good that EU tries to eradicate “let me steal and sell your secrets” business model that most SV startups are built on