There’s an exemption for “a natural person in the course of a purely personal or household activity” but I haven’t see any size cutoffs below which an organizat

There’s an exemption for “a natural person in the course of a purely personal or household activity” but I haven’t see any size cutoffs below which an organization can ignore GDPR process friction. 20M EUR fines are explicitly allowed no matter how low your revenue is.