How is knowing and writing down what your actually do with user data (and employee data, btw) and who is responsible an onerous regulation? In a world where lo

How is knowing and writing down what your actually do with user data (and employee data, btw) and who is responsible an onerous regulation? In a world where lots of small shitty businesses (and some bigger ones) don't care what happens to your personal data it's long overdue for this being finally regulated.