Or, the law works just fine and "hey, I want to steal user data without any consequences" is just not a good business model. Millions of small companies work ju

Or, the law works just fine and "hey, I want to steal user data without any consequences" is just not a good business model. Millions of small companies work just fine and have zero problems with GDPR. Only a very specific subset (mostly web companies that don't want to ask people for money, but instead sell their data) have real problems and cry loud.