The GDPR and other laws were really hammed up by consultants and lawyers looking to make a lot of money claiming it was really difficult to do right, but in my

The GDPR and other laws were really hammed up by consultants and lawyers looking to make a lot of money claiming it was really difficult to do right, but in my experience it's incredibly overblown. Most of who's getting caught up in these laws are very large companies that could comply but consistently don't put forth effort to do so after repeated complaints. Even if you do fall under the eye of regulators (most won't ever) if you show that you're putting forth a good faith effort to comply it's not a big deal.