I think your implicit assumption here is that all websites are businesses in some sense? But people often run websites that have no monetary transactions involv

I think your implicit assumption here is that all websites are businesses in some sense? But people often run websites that have no monetary transactions involved (except hosting, domain, etc costs). Since I'm one of these I worry about being forced to delete data just because some random persons who came to my metaphorical backyard BBQ didn't realize there was a metaphorical photographer there taking pictures. I get the spirit of the law and I'm glad incorporated entities will be regulated. I just anticipate substantial use of the 'Delete Act' for frivolous cases and malicious uses. Much like GDPR. With the good comes the bad.