Incorrect: Even a single person company described above will still need to handle GPDR requests. The operational requirements is not 0 even for a company retaining no unnecessary records.