If small businesses don't have manpower or money to handle user's information transparently, they should not collect those information in the first place. That'

If small businesses don't have manpower or money to handle user's information transparently, they should not collect those information in the first place. That's why I like GDPR.