> If you instead treat user data like a security liability > minimise collection > anonymise things early > remove data promptly when no longer needed, > ma

> If you instead treat user data like a security liability > minimise collection > anonymise things early > remove data promptly when no longer needed, > make it easy to audit what data you do hold These (and others) are the costs I am speaking of. The vast majority of HN commenters will tell you that these costs are worth the upside in user privacy (which is totally fine!). My point here is that the costs are not fixed. Over the decades we will see other, often sensible costs added to this list. While each individual cost may be small, they do accumulate and they influence who can and cannot start a business (or even personal website!) that deals with individuals from the EU. Large companies will always be able to pay these costs. Some small companies may not. What you make of this is up to your personal interpretation, but I will miss the web of 00's where it felt like anyone could build a website or online business with next to no overhead.