Already has, in fact. I was considering taking a personal project I’d been working on public and offering it to others. Whether paid or free, I fall under the r

Already has, in fact. I was considering taking a personal project I’d been working on public and offering it to others. Whether paid or free, I fall under the requirements of GDPR. I spent quite literally hours reading through everything I could find about what exactly a company of my size (1) needed to do. Even after I wrote the code to handle DSARs for me, I decided it just wasn’t worth it. In order to be comfortable I would need to hire a lawyer to review things (and continue to pay him to keep on top of changes as things make it through court cases), put together things like an official TOS, worry about whether I could include any analytics services in my product to see if customers were getting frustrated with a particular page... all to launch a free service with no clear path to recurring revenue. And that was on top of the existing worries of having customer data that I want to make sure is secure. Europe (and increasingly the US) sees corporations as all being huge tax avoiding monoliths of evil. Well, legislation like this will eventually prove them right because only the Googles of the world will still be able to afford compliance.