>Ironically, likely to be more work than not being an ass with customers' data in the first place. Your comment is pretty rude. Every business is going to have

>Ironically, likely to be more work than not being an ass with customers' data in the first place. Your comment is pretty rude. Every business is going to have different things that work for them. Some businesses aren't going to have resources to get counseling and make changes to comply with the regulation. Some businesses don't exist in the EU and have no interest in servicing the EU (most businesses in the world), and want to make sure they aren't going to run afoul of GDPR. And, some people are upset that they're having to spend brain cycles on a law that heavily modifies business and tech processes, that was enacted in a foreign government, and had no elected representation to present their concerns. I think the amount of data leaks and irresponsible data handling that companies take part in nowadays is completely awful, and shows disregard for people's well being. I think that companies need to treat personal data as a liability instead of an asset. I think that companies that choose to forgo EU business are leaving a lot of money on the table and put themselves at a competitive disadvantage. I also think that companies in foreign countries should have the right to opt-out of doing business with whoever they want, and exempt themselves of regulation by not doing business in the host state. And no, "not being an ass with customers' data" is not going to be less work than the few steps necessary to exempt yourself from GDPR.