If you lack the means to comply with the law, you must not collect the data! The article also jumps to the same troubling conclusion: That the law is deficient

If you lack the means to comply with the law, you must not collect the data! The article also jumps to the same troubling conclusion: That the law is deficient because it failed to make provision for greedy data hoarders to continue without changing their business. In my opinion the law is working as intended, and requiring extreme security precautions around the hoarding of personal data. If a few companies with abusive business models become non-viable in the process, that's a side benefit