That's not how the EU operates nor has it ever done. I live in the EU (and also work with online services by the way) and I'll grant you the EU is about as anti

That's not how the EU operates nor has it ever done. I live in the EU (and also work with online services by the way) and I'll grant you the EU is about as anti-business as governments get but only to the extent that it actually looks out for consumer rights. Which is a good thing because you're not going to get any of that from the US government. However the EU has also frequently put processes in place to protect businesses - particularly the little ones - from unfair bullying (eg FRAND patents). Let's be honest, the web / online industry isn't new anymore. They've had a chance to self regulate and instead all they've done is finely honed how to capitalise on their customers data. Even services you pay for are now in the business of tracking their users and selling that data. So someone had to step in and regulate the industry. And if GDPR really affects your forums that significantly (I'd wager not because forums are a dying breed and you're hardly sounds at the forefront of forum tech, from little you have disclosed) then I'd suggest you're likely doing something shady with your user data as well in which case I welcome the EU protecting me against your unethical business model as well. But more likely is the argument that your site isn't that big of a risk and you're just being irrational / listening to so bad advice. Maybe the consultants you've bought in are trying to justify their own jobs by feeding you FUD about GDPR? Either way I'd recommend you switch kool aid brands.