You might be noticed by your competitor, who reports you to the regulator.
> The argument expressed here is sleight of hand: complaining about the supposed impact on "the little guy" when the regulations themselves are designed to target Facebook & Google (among others) specifically.
No, that is not how they are designed. They might have been motivated by the behavior of Facebook and Google (or not, who knows actually) but they have been designed to target the big and little guys equally. Many GDPR proponents here in comments espouse that as a good thing.
They'll contact you and let you know there's a problem, and you need to fix it - that's it.
If you continually flout the regulations after being warned then sanctions will be escalated.
Half the world is running around saying "I'm going to be fined 20 million euros!" and it's just fear-mongering.
If you're a garage-startup, you're unlikely to be slapped with fines under GDPR. Let's be honest- if you're a garage startup you're lucky to be noticed by anyone, much less European regulators. The argument expressed here is sleight of hand: complaining about the supposed impact on "the little guy" when the regulations themselves are designed to target Facebook & Google (among others) specifically.
The regulations are not that complex, they just require a new standard of respect for users, one that we should have always had as an industry. The fact that we had to wait for regulators to force this on us is our shame, no one else's.