The GDPR isn’t hard and its application isn’t unreasonable. Just don’t be an asshole collecting unnecessary user data and you’re fine. No one’s going to ask you

The GDPR isn’t hard and its application isn’t unreasonable. Just don’t be an asshole collecting unnecessary user data and you’re fine. No one’s going to ask you to delete specific IP addresses, and you don’t need to keep those forever anyway. The only people who need to fear that law are those who have no respect for user data.