> And what are the consequences if something goes wrong? If some rule is broken it is not a big deal if there is no harm to anyone. Nobody is 100% compliant wi

> And what are the consequences if something goes wrong? If some rule is broken it is not a big deal if there is no harm to anyone. Nobody is 100% compliant with all regulations, but the companies which approach this matter pragmatically, following the spirit rather than the letter of the law, usually do not have problems. E.g. if you are health-tech startup, you must avoid any health-related risks and prevent data leaks, but you may not serve GDPR requests perfectly. At worst regulator will warn you and then you will invest your resources in fixing the issue. And preventing data leaks is also easier for an obscure early stage startup: you simply get less attention from malicious actors and will likely encounter automated attacks rather than being specifically targeted.