> The problem with these laws is that while they're mainly targeted at large corporations - because frankly that's all regulators and politicians usually know o

> The problem with these laws is that while they're mainly targeted at large corporations - because frankly that's all regulators and politicians usually know or care about - small companies bear the brunt of complying with them right now. This isn't much of an argument - every single law that impacts a business falls into this category. Tax law is the classic example. If you happen to own a huge company, you'll have more resources with which to comply with regulation. The tradeoff is that as your company size increases, the chances that a bad actor is doing something fucked up that your compliance team won't find about until too late increase. That's just how business works. Nor do I find small business owners struggling to remain compliant a particularly compelling argument. I'm a Canadian small business owner and yet I've managed to educate myself about GDPR. Hell, GDPR has been around in draft state for six years and there are tons of very well written resources available. The process of learning GDPR has been quite pleasant. And then, I add in the facts that GDPR isn't even a particularly big change and that again, these are all fundamental ways to protect your clients, I have even more trouble feeling the pain. Specifically consider these concerns that you cited. When I copy/paste your questions into Google, add an occurrence of "GDPR" and search, I get solid answers on the first page.