TBH I suspect most of them have never run anything. I did an info session for a team of consultants, and was careful to include a lot of information on the posi

TBH I suspect most of them have never run anything. I did an info session for a team of consultants, and was careful to include a lot of information on the positive intentions of the law, and every single one realized quickly that most of the costs of compliance for the vast majority of businesses had nothing to do with improving the state of privacy, and that for many business models that aren't abusing data this law is still going to be incredibly expensive. There's just a huge gap between people who viscerally understand making high-level business decisions and people who don't, and the vast majority of the writers and supporters of this law appear to be in the "don't" group.