I agree with the fundamental protections provided by privacy act legislation, but I'm concerned that the cost of compliance (hiring people to respond to every gdpr request, for example) prevents startups and smaller companies from competing with larger companies who already have lawyers on staff.