> If it turns out that I misunderstand some aspect of compliance here, I’m happy as that is good news for me. There is a vested interest amongst people that pr

> If it turns out that I misunderstand some aspect of compliance here, I’m happy as that is good news for me. There is a vested interest amongst people that profit from users data to attack the GDPR and similar laws and spread FUD whenever possible. It could be helpful to switch "user data" with "child labour" and see if your perspective changes. The problem you likely have is while you don't exploit child labour, you are responsible for ensuring your supply chain doesn't either, and your supply chain may use the profits from that child labour to subsidise their product to you. A competitor which doesn't use child labour charges more, so you think "the cost of compliance is high", rather than "my profits are being subsidised by child labour"