Note, just because it's worth pointing out: The GDPR is not limited by size -- it applies to individual blog owners, small non-profits, etc. You're thinking of

Note, just because it's worth pointing out: The GDPR is not limited by size -- it applies to individual blog owners, small non-profits, etc. You're thinking of California's CCPA. Also, while the lack of minimum size has vicious aspects, that has pushed small areas without large chains to also be compliant. Someone in a small town being unable to go to any businesses because due to being in a wheelchair is likely much worse off than someone in the same situation in a large city where the large chains have ADA compliance designed in from the start.