Not only is the GDPR not difficult to comply with (just use only the personal data you need to provide your service - and don’t share it with others), it’s also

Not only is the GDPR not difficult to comply with (just use only the personal data you need to provide your service - and don’t share it with others), it’s also nothing new: it’s just a bunch of previously existing privacy laws bundled together. Not all those laws applied to all EU countries before, but, basically, if you were doing business across the entire EU all the laws that you had to conform to together looked a lot like the GDPR.