It doesn't affect me hugely. The biggest impact was that I had to spend time to define these processes and outline my privacy policy. I didn't need to go and redo all of my forms/consent flows because all the data I collect is reasonable and necessary.