> I don't know why others are mentioning a DPO. You won't need a DPO. After reviewing those parts of GDPR a bit more, I agree. I was thinking of the EU rep for

> I don't know why others are mentioning a DPO. You won't need a DPO. After reviewing those parts of GDPR a bit more, I agree. I was thinking of the EU rep for businesses outside the USA. > The easiest route to compliance is to not collect Personal Data. The product I am working on has a social aspect. That said, nothing - particularly the data the GDPR defines as sensitive - would be collected without explicit consent from the users. Actually, nothing is really collected without their opt-in. > As a solo founder, don't worry about it. Thanks for chiming in! It is good to hear from someone in a similar situation.