Some'll say big companies like regulations, increases barrier of entry. Then others'll respond that GDPR is looking to be flexible with small companies, looking for intent to comply