I was at presentation about GDPR in Norway and the implied message was similar. It can be tricky to implement GDPR correctly, but if a small company will mistak

I was at presentation about GDPR in Norway and the implied message was similar. It can be tricky to implement GDPR correctly, but if a small company will mistake on that, authorities will simply point to it with a reasonable timeline to fix it before any talk about fines. Bigger companies is supposed to have resources to implement GDPR properly the first time.